last executing test programs: 2m32.563210428s ago: executing program 0 (id=324): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100013070000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c00140073686131"], 0x160}}, 0x0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendto$inet6(r1, &(0x7f0000000640)="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", 0x1000, 0x20040804, &(0x7f0000001640)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x0, 0xc1) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xf5, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xa6, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x6, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x1, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffff9, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x4, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0xfff, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x4, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x3851e29c0fbae85c, 0x0, 0x0, 0x0, '\x00', r5, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m32.201368684s ago: executing program 0 (id=325): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000008e00000071122200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r1, 0xe72b6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m32.013601822s ago: executing program 0 (id=326): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) 2m32.013051697s ago: executing program 0 (id=327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)={0x58, r10, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newpolicy={0x270, 0x13, 0x20, 0x70bd29, 0x25dfdbfd, {{@in=@multicast1, @in=@private=0xa0f, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x67, r2, r3}, {0x1, 0x10001, 0x3, 0x2, 0x3, 0xffff, 0x3, 0xb}, {0x74a5, 0x5b4, 0x2, 0x42a3}, 0x3ff, 0x6e6bb3, 0x2, 0x0, 0x3, 0x1}, [@policy={0xac, 0x7, {{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x7ff, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x3b, r5, r7}, {0x705, 0x3, 0x10, 0x4d0, 0x7, 0xac4, 0x1, 0xb9e1}, {0x0, 0x2, 0x5a5, 0x8}, 0x81, 0x6e6bb3, 0x2, 0x0, 0x6}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8001}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @srcaddr={0x14, 0xd, @in6=@local}, @address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2, 0x10}}, @policy={0xac, 0x7, {{@in=@multicast1, @in=@local, 0x4e22, 0x4, 0x4e22, 0x800, 0xa, 0x20, 0xa0, 0x16, r11, 0xffffffffffffffff}, {0x3, 0x311, 0x400, 0x1ff, 0x7, 0x7, 0x5293, 0xb}, {0x101, 0x6, 0x7, 0x81}, 0x3, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x270}}, 0x0) 2m31.883425718s ago: executing program 0 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000001c00)={{&(0x7f0000000bc0)=""/4096, 0x1000}, &(0x7f0000001bc0), 0x42}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) (async) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000001c00)={{&(0x7f0000000bc0)=""/4096, 0x1000}, &(0x7f0000001bc0), 0x42}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4000080) (async) 2m31.06164493s ago: executing program 0 (id=330): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 2m30.929310044s ago: executing program 32 (id=330): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 2m18.129269794s ago: executing program 1 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 2m18.063004094s ago: executing program 1 (id=452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) close_range(r1, r0, 0x200000000000000) 2m17.993632217s ago: executing program 1 (id=453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150001030094aeec240000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (fail_nth: 7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m17.831822945s ago: executing program 1 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x3e}) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) close(r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x1dc) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file1\x00', 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uac1_legacy.usb0/fn_play\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x3e}) (async) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) (async) close(r1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1dc) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0/file1\x00', 0x3, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uac1_legacy.usb0/fn_play\x00', 0x0, 0x0) (async) rmdir(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00') (async) 2m17.774820278s ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001811ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m11.982993399s ago: executing program 1 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x7) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 2m11.936535558s ago: executing program 33 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x7) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 56.442506551s ago: executing program 3 (id=1248): syz_emit_ethernet(0x3e, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89}]}}}}}, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r1 = epoll_create(0x2) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000000)={0x70002004}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r3 = socket(0xa, 0x3, 0x87) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async, rerun: 64) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 55.871433463s ago: executing program 3 (id=1255): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd"], 0xcfa4) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0008004500ffffe00090780068014800"/42], 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x2, {0x1, 0xf0, 0x4}, {0x0, 0xff, 0x1}, 0xfe}, {0x2, 0x0, {0x2}, {0x1, 0xfe, 0x3}, 0x2, 0x1}, {0x2, 0x2, {0x1, 0xff, 0x2}, {0x1}, 0x2, 0xfd}, {0x3, 0x2, {0x2, 0x0, 0x3}, {0x1, 0x0, 0x2}, 0x2, 0xfe}], 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000f40)=ANY=[@ANYRES8, @ANYBLOB="e13c8dddc8"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 55.608652575s ago: executing program 3 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000010000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 55.478914094s ago: executing program 3 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2793, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, &(0x7f00000001c0)="c6404aac2867b3c7badbfa243795937070ab28bb2acb0cfd9b", &(0x7f0000000200)=""/110}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x18}, 0x20) 55.474175345s ago: executing program 3 (id=1258): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000800)=[@in6={0xa, 0x4e21, 0x4, @empty, 0x9000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xb795, @empty, 0x7}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x3, @remote, 0xfa89}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, @in6={0xa, 0x4e23, 0xc, @local, 0x5a7}, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e20, 0x70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}], 0xf4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = openat(r1, &(0x7f0000000500)='none\x00', 0x1, 0x22) write(r2, &(0x7f0000000600)='serial8250\x00', 0xa) r3 = syz_ublk_setup_io_uring(0x19d, &(0x7f0000000340)={0x0, 0x8785, 0x200, 0x0, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000540)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_PAC_RESET_KEYS(0x36, 0x6) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r7) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000000000000020000000900016d79300000000000000000000000000000000000000000000000000000dfde30eaad70a0dc7a02cf9ce447a2e34b193734506033aa0856a355fdad4e9da038d211627498b02d2261868b482c0800dc6c52922f16a016618ec1d3803dcf1d3d890d2df9f53dfc8dabf5d3"], 0x34}}, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r10, 0x0, 0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000640)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x3, 0x3ed, 0x0, 0x0, 0x1000, 0x401, 0x0, 0x0, 0xa4}}}, &(0x7f00000006c0)) syz_ublk_add_dev(r1, r4, r5, r6, &(0x7f0000000740)={0x2e, 0x14, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x4, 0x534, 0x0, 0x0, 0x1000, 0x5, 0xffffffffffffffff, 0x0, 0x14}}}, &(0x7f00000007c0)) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r7) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "f27a11ee39dd61ab5b249acd5fbac548a526f90e005bf7d7fe974b602458a36fcceb5e5a107ebc1aa02687d8a3a2985219ac889b458cd505477841e3aded9755", 0x2e}, 0x48, 0xffffffffffffffff) bind$802154_dgram(r12, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) read$FUSE(r13, 0x0, 0x0) connect$802154_dgram(r12, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) 54.549459242s ago: executing program 3 (id=1269): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001140)=@nfs={0x90, 0x24, {0x6, 0x2c8, 0x5, 0x80, "ef6d3ecc9077ce8397d8219a44f9622d928ac4b6d4ffd1a49cdc5aa0c83500d5c6ed973654a6d576c0aa5f849ba377db2a7784e54a2524819ab44e3c412660824d697aa9611690e75d64daed51ca2da54d835d5907c5729c14a1afc76184ded6f7e39645aef32c66d4c775afb613810c4ec5204fa51f43d093357dbcc5473f8a"}}, 0x4100) write(r0, &(0x7f0000000200)='rt1711h 0x4', 0xb) 44.809490226s ago: executing program 5 (id=1350): syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x260083, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x22) 44.718509823s ago: executing program 5 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0xb4, 0x31, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x694}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xb4}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xe5}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) 43.761419471s ago: executing program 5 (id=1363): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x623a11b3, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r10, @ANYBLOB="08006b001c02"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bind$packet(r11, &(0x7f0000000440)={0x11, 0xf7, r12, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r7, 0x0, 0x9400, 0x10132, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e3000"/28], 0x34}}, 0x0) 42.351651801s ago: executing program 5 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) setfsuid(0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x28, 0x0, [0xfffffffb, 0x1ff, 0xbb, 0x4, 0x2, 0x1, 0x2, 0xfffffffe, 0x9, 0xc00, 0xffffff3f, 0x9, 0x6, 0x8000008, 0xfffffff7, 0x5]}], r1, 0x1, 0x1, 0x48}}, 0x20) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000010c0)={0x2, {{0x2, 0x4e1e, @multicast1}}, {{0x2, 0x4e22, @remote}}}, 0x108) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast1}, 0x8) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}}, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x111000, 0x0) write(r7, &(0x7f0000000240)='dummy_udc.0', 0xb) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010000fd0000000000000200030004000000080006000100000008000500", @ANYRES32=r4, @ANYBLOB="fd"], 0x28}}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r9, 0x80044dff, &(0x7f0000000080)) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000006c0)={"2d70691d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000000000001c0600", '\x00', "0f00", "64bdac32", ['\x00', "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000480)={0x5, 0x2, 0x1, 0xf6, 0x0, 0x400005, "0f0010000000000000000100", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xfe}) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x90000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r8, 0x80026101, &(0x7f0000000100)) umount2(&(0x7f0000000040)='./file0/file1\x00', 0x4) 42.240178055s ago: executing program 5 (id=1379): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 41.921550394s ago: executing program 5 (id=1380): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x7fffffff, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x3, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x2000000401, 0x8000, 0x8, 0xffff, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x2000401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000000, 0xcc7c, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec1, 0x1, 0x5, 0x400fff, 0x8, 0x80]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 41.749842476s ago: executing program 34 (id=1380): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x7fffffff, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x3, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x2000000401, 0x8000, 0x8, 0xffff, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x2000401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000000, 0xcc7c, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec1, 0x1, 0x5, 0x400fff, 0x8, 0x80]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 39.563332643s ago: executing program 35 (id=1269): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001140)=@nfs={0x90, 0x24, {0x6, 0x2c8, 0x5, 0x80, "ef6d3ecc9077ce8397d8219a44f9622d928ac4b6d4ffd1a49cdc5aa0c83500d5c6ed973654a6d576c0aa5f849ba377db2a7784e54a2524819ab44e3c412660824d697aa9611690e75d64daed51ca2da54d835d5907c5729c14a1afc76184ded6f7e39645aef32c66d4c775afb613810c4ec5204fa51f43d093357dbcc5473f8a"}}, 0x4100) write(r0, &(0x7f0000000200)='rt1711h 0x4', 0xb) 5.74396942s ago: executing program 6 (id=1768): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x20}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000440)={0x2, 0xfa}, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="00a779812a0000000000000000000000000000006119900000001200950000001cb5241996c5ddc7b24901dfeed5cdc9b16f753f201294c1309433ec40fa511f3c741cedd9bb14c98dc275b181026f9643cc503b0b7e6da15062c4083c23d53dc5b00b26c6341ac31ea1f4df4decb633ad1bb5d8828e0e09fec021e74f9e5bed4b9c4d255958683ce8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r3 = dup3(r2, r2, 0x0) ioctl$MEMISLOCKED(r3, 0x80084d17, &(0x7f0000000040)={0x8, 0x2}) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0xe) 4.69318071s ago: executing program 4 (id=1779): r0 = io_uring_setup(0xa95, &(0x7f0000000000)={0x0, 0xc175, 0x4, 0x3, 0x5c}) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0x8, 0x7ff, 0x11) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000, 0x10000}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x4) (async) write$P9_RWRITE(r4, &(0x7f00000001c0)={0xb, 0x77, 0x1, 0x3}, 0xb) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) (async) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000200)={0x3, 0xc7, "6e9e2955463cebde4bb48443ff73ee7b74e3f9603d3b2544439d63ba42550b148a869ce0a857e24485195d5ba66e8b94dc535a48be93b2af1c03b3a4f00e0b205a12b697bb45f1cfe48e95ec962c0746d3eb8436997e7482a1efca5b2c6a5ebbf6fbbf2e45801e1b4fdae53b91c1a488d3731f102c671d1a76a195c8d7a4d15a52968d7b5314bfbbf1a4a22c269fd15d6447c787c866bb19c13afd43a456fdcc1755e3cd61189d272d277f23bf56138a440883e2d2e04df2bb4bab32fae64207ded90b623e68ea"}) fcntl$setlease(r3, 0x400, 0x2) (async, rerun: 64) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000300)={r4, 0x9, 0x2, r4}) (async, rerun: 64) lseek(r2, 0x2, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = timerfd_create(0x9, 0x80000) (rerun: 32) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000340)=0xff) (async) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0xf, 0x80, 0x2, 0x9}) (async, rerun: 64) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, r6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8, 0x1a568fcb76f3588, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000051) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000580)={0x5, 0x20, "fbb7c5cbedabab00e388d3c07e5018a33b41cc8e0fbad226", {0x80, 0x6}, 0xaed0}) (async) write$mtd(r4, &(0x7f0000000600)="ccb160d1ae9c78fe5a2662fbd2574c65ca8ddf05c2a562b3fa767dea3504b6c73187667528f487d1b3f77f835b57aef0a8efa34edcda97feed42cb5456f0f3a8d4c3b23bd27792ed7ccbe8", 0x4b) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x290, 0x290, 0x108, 0x328, 0x1a0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f0000000680), {[{{@ip={@multicast2, @multicast1, 0xffffff00, 0x0, 'netdevsim0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x2, 0x20}, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@ah={{0x30}, {[0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv6=@mcast2, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'tunl0\x00', 'gretap0\x00', {}, {}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x210, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'pim6reg0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x1, 0x7}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc}}, @common=@ttl={{0x28}, {0x3, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000009200)=[{0x7f, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/98, 0x62}]}, {0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000d00)=""/2, 0x2}, {&(0x7f0000000d40)=""/71, 0x47}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/234, 0xea}, {&(0x7f0000001ec0)=""/127, 0x7f}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)=""/99, 0x63}, {&(0x7f0000002000)=""/34, 0x22}, {&(0x7f0000002040)=""/131, 0x83}, {&(0x7f0000002100)=""/4096, 0x1000}]}, {0x10001, 0x0, &(0x7f00000055c0)=[{&(0x7f00000031c0)=""/245, 0xf5}, {&(0x7f00000032c0)=""/89, 0x59}, {&(0x7f0000003340)=""/157, 0x9d}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/62, 0x3e}, {&(0x7f0000005440)=""/152, 0x98}, {&(0x7f0000005500)=""/185, 0xb9}]}, {0xfc, 0x0, &(0x7f0000006700)=[{&(0x7f0000005640)=""/34, 0x22}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/77, 0x4d}]}, {0x2, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006740)=""/246, 0xf6}, {&(0x7f0000006840)=""/178, 0xb2}, {&(0x7f0000006900)=""/126, 0x7e}, {&(0x7f0000006980)=""/178, 0xb2}]}, {0x80000000, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000006a80)=""/35, 0x23}, {&(0x7f0000006ac0)=""/56, 0x38}, {&(0x7f0000006b00)=""/147, 0x93}, {&(0x7f0000006bc0)=""/4096, 0x1000}]}, {0xc, 0x0, &(0x7f0000007dc0)=[{&(0x7f0000007c00)=""/234, 0xea}, {&(0x7f0000007d00)=""/156, 0x9c}]}, {0x4, 0x0, &(0x7f0000007e80)=[{&(0x7f0000007e00)=""/48, 0x30}, {&(0x7f0000007e40)=""/16, 0x10}]}, {0x744, 0x0, &(0x7f0000009180)=[{&(0x7f0000007ec0)=""/112, 0x70}, {&(0x7f0000007f40)=""/74, 0x4a}, {&(0x7f0000007fc0)=""/239, 0xef}, {&(0x7f00000080c0)=""/161, 0xa1}, {&(0x7f0000008180)=""/4096, 0x1000}]}], 0x9) (async, rerun: 64) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f00000092c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000009340)={'\x00', 0x2, 0x5, 0x2, 0x10000, 0xffffffff, r7}) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000093c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, 0x2, 0x4}, &(0x7f0000009480)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000009540)={r8, 0x48, &(0x7f00000094c0)=[@in6={0xa, 0x4e20, 0xffffff00, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x8}]}, &(0x7f0000009580)=0x10) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x6, 0x4) (async) getdents64(r4, &(0x7f00000095c0)=""/201, 0xc9) 4.690016081s ago: executing program 4 (id=1780): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x2f17, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x198}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f0000000000)=0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x7d4165c9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) listen(0xffffffffffffffff, 0x0) r15 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r15, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r16 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r16, 0x4bfb, &(0x7f00000010c0)) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010022bd7000fbdbdf2d0200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000051000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x80) r17 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r17, 0x2) 4.533288072s ago: executing program 4 (id=1781): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.469755591s ago: executing program 4 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110030", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.46865808s ago: executing program 4 (id=1783): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs(r0, &(0x7f0000000040)='net/ip_tables_matches\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000080)='msdos\x00', 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) dup(r2) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e1d", @ANYRES16=r3], 0x22) 4.362396378s ago: executing program 6 (id=1785): syz_emit_ethernet(0xbb, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb8906ed9e681963b59679626ced9a5400af9db4b9ba4490bf4955d12ea0f04bdbf1877bf2c8037632f0904bc60fb5f75f2ace01c774b02e19b2c188015b2567e8dd6a56b7fff57fc7c25183654c40b561c8073255efcb0d5a9156d3d90e46d77fa69fbd0f0b0000758125abcd73e5c76ee9a46b52e911d80cf61a4cae2ad9a7788e5092ac8b486e5ee8281e39b95b38d579089893515adcbc344cd62accc09f3f22c5f97c2dc84f40514002f1d881ab"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xd) 4.074001047s ago: executing program 7 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000003000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 4.023651372s ago: executing program 7 (id=1789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x8c11, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0xffff, 0xfff1}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x4020) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x90, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.852453758s ago: executing program 7 (id=1790): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1b, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000029000000370000001600000000000000180000000000000029000000040000003c0d002400000000"], 0x30}, 0x3400c8d4) flock(0xffffffffffffffff, 0xa422928b49da8f63) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x20000008, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x0, 0x1) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) ppoll(&(0x7f0000000340)=[{r5, 0x400c}, {r6}], 0x2, &(0x7f0000000380), 0x0, 0x0) syz_emit_ethernet(0x249, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "ae4f56", 0x213, 0x6, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, {[@srh={0xd5, 0x6, 0x4, 0x3, 0x8, 0x50, 0x7ff, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}, @hopopts={0x0, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x9}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x3}]}, @fragment={0x1d, 0x0, 0x81, 0x1, 0x0, 0x1a, 0x67}, @fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x67}, @srh={0x2c, 0xa, 0x4, 0x5, 0x9, 0x10, 0x100, [@mcast1, @mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0xc, 0xb, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x6, 0x44, "c5f26eefeafb4282417fef6179f4df7e579c4b304a61863ac873dc0cc48f08cab29e45cc420d489fc36ab99f519bbd1f503a06379a5147b3a34fc0704215dd63563644cc"}]}], {{0x4e24, 0x4e24, r3, r4, 0x1, 0x0, 0x10, 0x20, 0x7, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x9}, @fastopen={0x22, 0x8, "32f81a3518e4"}, @sack={0x5, 0x2}, @sack={0x5, 0xe, [0x9, 0x7, 0x738e]}, @timestamp={0x8, 0xa, 0x7, 0x3}]}}, {"bb2a1e68a4b9d8c7824008964f7b047486f4a6bd8447e0140d10a61783c9eb915d51a2a082a7c33dc2b99a7e9a1494d3556069011ec37a00e41a7461931e7ae2b0e3913f26f37017f9c0dc84f2e2be39d5ec8caa585e95da2d305e7f724a8b96f8ca8cdc9c3cf2b7c1694c1ec01bd390ec64f471a575b2b5338ed0cdebe4aafed252815bbd6791d528b9b1968b0fd3528737fb"}}}}}}}, 0x0) 3.851338211s ago: executing program 7 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001811003f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.78337781s ago: executing program 7 (id=1792): io_setup(0xa, &(0x7f0000000000)=0x0) r1 = eventfd(0xff) io_cancel(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)="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", 0x1000, 0x5c, 0x0, 0x83884421497c655, r1}, &(0x7f0000001080)) r2 = eventfd(0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_TDX_INIT_VM(r3, 0xc008aeba, &(0x7f0000001280)={0x1, 0x0, &(0x7f0000001100)={0x8000000000000000, 0x0, [0x9, 0x5, 0x0, 0x7, 0x9, 0x6], [0x7, 0x2, 0x6, 0x9, 0x5, 0x3], [0x4c, 0x67, 0xfff, 0x1000, 0x5, 0x8], '\x00', {0x3, 0x0, [{0xc, 0x8, 0x6, 0x9a, 0x0, 0x8, 0x41}, {0xd, 0x6, 0x4, 0x7, 0x38b8f475, 0x3, 0xfffffffd}, {0x40000000, 0xa000, 0x4, 0x4, 0xfff, 0x3, 0x5}]}}}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000012c0)=r3) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000001480)={"f009c7a9298566262e3c44c7", &(0x7f0000001300)="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", 0xfd, 0x8, &(0x7f0000001400)={0x19, 0x0, 0x5, 0xa, 0x0, 0x1, 0x0, "9b956bb9", 0xbf, "274b963e", 0xf7, 0x9, 0xa, "9558ab", "46aa92989c2bcc5827215ced2b9e3667bd9cadc8db010950b64746a8dac3840d518081361cfd91ce65e265f5b2ac"}, 0x3, 0xe49, 0x1, &(0x7f0000001440)}) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x2e, 0x2c, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000014c0)=@any_dev={0x1, 0x101, 0x0, 0x0, 0x1000, 0x2a7, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000001580)) fsetxattr$security_capability(r4, &(0x7f00000015c0), &(0x7f0000001600)=@v2={0x2000000, [{0x1, 0x8}, {0x3, 0x1ff}]}, 0x14, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000001640)={[0xfff, 0x9, 0x9, 0x49ba, 0x7, 0x4, 0x1, 0x73, 0x70000000, 0x3, 0xc, 0x3, 0x3, 0x5, 0x7, 0x4], 0xffff1000, 0x4200}) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000001700)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001740)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000001a80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001800)={0x20c, r7, 0x111, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc4f}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3999}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9f9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95c9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x4000841) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000001ac0)=0x8000) pipe2$watch_queue(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fgetxattr(r5, &(0x7f0000001b40)=@known='trusted.overlay.origin\x00', &(0x7f0000001b80)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000002c00)='./file0/file0\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe222aac87348a5a9) mount$fuse(0x0, &(0x7f0000002b80)='./file0/file0\x00', &(0x7f0000002bc0), 0x1000000, &(0x7f0000002cc0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}], [{@context={'context', 0x3d, 'staff_u'}}, {@flag='dirsync'}]}}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000002d80)={0x0, 0x61cf}) sendmsg$nl_netfilter(r9, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e00)={0x154, 0x5, 0xe74b610a1f48bb8d, 0x201, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x9}, [@typed={0x8, 0xbc, 0x0, 0x0, @u32=0x10}, @nested={0xea, 0x11a, 0x0, 0x1, [@generic="c2a4fde6a7f2d1d7d38b5f147a4350a007b22644dbfa90fd5af33144f2cbb3ab45e37b6148a83b217b7a7f51cc60d1bb84e0ad222783bfb843ea415e21fe3b56bfe3a1034446ac3c9f173da8d41eb7ea6d76244ae90e9297a948f26d97736d41c05fad0f87285a2a136dea3a0c71770548a015c8444dcde92c074f5539b37516b3724c8895e3666d1887c3a67270a3d996dcf86ad234c5749e5f5565a07ca7b60607f50742bf6b514f550227f189bdf2f1bfbe7914c52fbe3dde3e6a17414b2a8da80342aa91dd9410cf4844aa649116748bd2b11c4a9b0d5a431c5605473271dd6a", @nested={0x4, 0x78}]}, @typed={0x8, 0x136, 0x0, 0x0, @str='#]/\x00'}, @typed={0x8, 0x125, 0x0, 0x0, @u32=0x3}, @nested={0x39, 0x79, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0x67}, @nested={0x4, 0x1c}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, @generic="47174795f639f3518e", @nested={0x4, 0x13e}, @nested={0x4, 0xd5}, @nested={0x4, 0x1d}]}]}, 0x154}}, 0x20000000) setsockopt$MRT6_ASSERT(r9, 0x29, 0xcf, &(0x7f0000003000)=0x1, 0x4) io_submit(0x0, 0x1, &(0x7f0000003180)=[&(0x7f0000003140)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000003040)="ad1502d411082e3f3dfab01018848042dc40809e39bb93441062006e509dcb6073e5f327d6424bc12c608965d4c60a3c59a0714dd4bce7ce434e05a29c1ec0ac3d12b65c04ba1939f6fb93426436dacb64364cec3bd1027b24fcee31b308cf9aa26eb713f6d4e9eabfe8937bf0b9c86ff437ea4bfe859c6ae3528d83e8d774881314186d21d3b68c1fe7302ccf0e39fe1fd9774460e6f80d8a558507b64017cabf4085af4faa4fca6ddad234844ee88a270f15580ea94833af00f8b35f67861e42d9feb1fe115b3864dc0e19be113209c3f3fb8071de54cbae0e1004dcef2b207233eca4babb6566a5e1bfde628e0aba635778d316fee2c435f140e966daa9", 0xff, 0x7, 0x0, 0x2}]) read$FUSE(r3, &(0x7f00000031c0)={0x2020}, 0x2020) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000005200)=0x3) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000005240)=[r8, r4, r1, r9, r2, 0xffffffffffffffff, r1], 0x7) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000005380)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005340)={&(0x7f0000005300)={0x38, 0x0, 0x200, 0x70bd2c, 0x8, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 3.643030496s ago: executing program 7 (id=1793): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = fanotify_init(0x8, 0x40000) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'pim6reg0\x00', 0x8000}) ioctl$sock_ifreq(r6, 0x8943, &(0x7f0000000100)={'syzkaller1\x00', @ifru_ivalue=0x1}) read(r5, &(0x7f0000000400), 0x1000) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r0, 0x1, 0x100018, r7, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r8, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={r9, r10/1000+60000}, 0x10) accept4(r8, 0x0, 0x0, 0x80800) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x8, 0x6b, 0x1, {0x22, 0x429}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x45, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7f, 0x4b, 0xf8}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x1, 0x3, 0x0, 0x55829c5035ee3dc5, 0x8}, 0xfe, &(0x7f00000001c0)={0x5, 0xf, 0xfe, 0x2, [@generic={0xef, 0x10, 0x1, "a115f3ff1487422844245b52d5f365d8a795b03890adee8ac54b598a1c29eb4acc4eb3cd7846f2e7d22da479c83aa5abef45da5a9f837e2e1d266a6ad1d55e0e468c2123c2cdd4dee1d2b634c89b29abf67fd840c862afe9050f245407321949740e6dd22984dd3e62110c273b72e9fcd9fea79ca01d9b89d08d2536442c8aeb3a1125f54ab595c74d34d2b6d1640e055ce8be929d5ec0b09d9d9069fe379242353371308e3be66946f09c7f698c48979158f1254bd68d91482632875abf6fc1992f5c648845bcd3ebb4bb0a5d18e71d0c725eaf5cd5d94707e1a7e8f4a781d2d25762245beab3da8f72d12b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x1, 0x5}]}, 0x1, [{0xd, &(0x7f00000002c0)=@string={0xd, 0x3, "5989a26f6a44127d679455"}}]}) 3.512819474s ago: executing program 6 (id=1795): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 3.511747961s ago: executing program 2 (id=1796): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000440), 0x200888, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="090000000000000005690000000000002c00"]) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x402000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x9, 0x80}, 'port0\x00', 0x2e, 0x0, 0xcab1a6, 0x240, 0x6, 0xe, 0x48, 0x0, 0x2, 0x3}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000001900000127bd7000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="0800323ccffa0900", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000140)={0x1, 0x1}) 3.443513632s ago: executing program 6 (id=1797): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0xa, 0xce024d}, 0x9c) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (rerun: 32) r4 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='c:::\x00', 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x4, 0x0, 0x11044, 0x2}, 0x30, 0x3) landlock_restrict_self(r5, 0xa) 3.443289261s ago: executing program 6 (id=1798): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffe}, 0x94) madvise(&(0x7f0000544000/0x4000)=nil, 0x4000, 0x64) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x23fc}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.41557545s ago: executing program 2 (id=1799): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x10400, &(0x7f0000000040)={@align=0xfab8, {0xc1e, 0x6, 0xc6f5, 0x3}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x74f}, {[0x9, 0x0, 0x1, 0x3cb]}, 0x800, 0x49, &(0x7f0000000100)=""/73}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x47, 0x13}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4ca28173cf23a67f7594db805dc8cedd"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "07e50ca1116999d8bb5cb0933f8725ad"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000003c0)={@remote, r2}, 0x14) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000400)={{0x1, 0x2, 0x5, 0x7, 0x2, 0xfffff001}, 0x343, [0x2, 0x8, 0x4, 0xd, 0x9, 0x7, 0x5, 0x4, 0x5, 0x4, 0x8, 0x8, 0x7fffffff, 0xd, 0x265d, 0x2, 0x7f46, 0xfd, 0x8000, 0x80000000, 0xad, 0x3, 0x4, 0x80000000, 0xffffffff, 0x1ff, 0x81, 0x2, 0xfffffffd, 0x8, 0x4, 0x5fe, 0x666, 0x1, 0x9, 0x80, 0x8, 0x865, 0x30b3, 0x0, 0x8, 0x3ff, 0x4b4, 0x2, 0x9, 0x8000, 0x470310a1, 0x1, 0x3, 0xffffffff, 0xf8, 0x6, 0x9, 0x0, 0x3, 0x0, 0x8, 0x8, 0x4, 0x477cae63, 0x1c0, 0x1, 0x75, 0xd, 0xfffff800, 0xfffffffc, 0xc241, 0x80, 0xf7d, 0x0, 0x4, 0x9, 0x7, 0x4, 0x8, 0x81, 0x3ff, 0x1, 0x2, 0x7, 0xdaf, 0xe0bc, 0x5, 0xd, 0x0, 0x3, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x2, 0x101, 0x0, 0x3, 0x2099, 0x7, 0x7, 0x8a36, 0x9, 0x8, 0x8, 0x8, 0x5, 0xee, 0x9, 0x6, 0xffffffff, 0x81, 0x5, 0xf686, 0xfffffff8, 0xf, 0x7f, 0x2, 0x2, 0x4, 0x7, 0x10000, 0x8, 0x5, 0x9133, 0x6, 0xda, 0x9, 0xd, 0xb, 0x9, 0x2, 0xffffff7f, 0x6, 0x2, 0x0, 0x47, 0x8, 0x80000000, 0x2, 0x7fff, 0x9, 0x7, 0x5, 0x8000, 0x5, 0x1, 0x2, 0x80, 0xfffffffe, 0x3, 0x10, 0xe, 0x2, 0x6, 0xe, 0x800, 0xe, 0x9, 0x3, 0x5d, 0x80000001, 0x7, 0xf, 0x5, 0x9, 0x6, 0x23, 0x1ff, 0x6, 0x6, 0x0, 0x7643, 0x100, 0x0, 0x9, 0x3, 0x0, 0xd479, 0x2, 0x5, 0xd55, 0x10000, 0x0, 0x8, 0x7, 0x2, 0x7, 0x8, 0x8, 0x3, 0x7, 0x583fa84e, 0x9, 0x80000001, 0xa2, 0x2, 0x4, 0xfffffff8, 0x6, 0xf, 0x6, 0x2, 0x81, 0xb5, 0x9, 0x94d, 0xc1b, 0x8, 0xaf22, 0x0, 0x9, 0x5, 0x200, 0x2, 0x3, 0x9, 0x9, 0x0, 0x0, 0x2, 0x4, 0xb, 0x8b, 0x0, 0x8, 0x577, 0x2, 0x0, 0xffff, 0x400, 0x8001, 0x0, 0x3, 0x5, 0x498, 0x1000000, 0x3ff, 0x5, 0x28, 0x8, 0x4, 0x4, 0x7, 0x0, 0x8001, 0x100, 0x5, 0x1, 0x1, 0xfffffffc, 0x2, 0x9, 0x5b00, 0x0, 0x7fff, 0xffff, 0x10, 0x100, 0x7, 0x9, 0x3, 0x0, 0x4, 0xffffffff, 0x5, 0x5, 0x5, 0x10001, 0x6, 0x1, 0x70, 0x7973, 0x2, 0xc9, 0x9, 0x800, 0x1, 0x8, 0xf, 0x7fff, 0x6, 0x4f, 0x8, 0x6, 0x1, 0x2, 0x5, 0x543f, 0x813, 0x5, 0x8, 0xd7f, 0x7f, 0x4, 0x8, 0x80000001, 0xffff, 0x8292, 0xfffffe01, 0x2, 0xfffffffc, 0x0, 0xae, 0x800, 0x35, 0x10001, 0x9, 0x5, 0x2, 0x100, 0x2000, 0x2, 0xcf4, 0x3, 0x20cb, 0x5, 0xfff, 0x0, 0x1, 0x2, 0x40, 0x4, 0x66c, 0x8, 0x7f, 0x7, 0x47, 0x1, 0xfff, 0x9, 0x8001, 0x1db, 0x0, 0x2, 0x4, 0x4, 0x3ff, 0xe4f4, 0x5, 0x3, 0x0, 0x2, 0x3, 0x1000, 0x4, 0x8, 0x1, 0xdf8, 0x0, 0x7fffffff, 0x2f4, 0xffffff7f, 0x6, 0x7, 0xc, 0x1, 0x5, 0x3, 0x44, 0x7, 0x6, 0x200, 0x2, 0x19, 0x6, 0x0, 0xe, 0x7, 0x5c1ce02b, 0x380, 0x9, 0x8, 0x1000, 0xffffff15, 0x8, 0xf10c, 0xffff, 0x8, 0xc, 0x2, 0x4, 0x3, 0xf, 0x2, 0x4, 0x8, 0x8, 0x5, 0x10, 0x2, 0x7, 0x1c5f, 0xffffffff, 0x80000001, 0x401, 0x5, 0x7, 0x0, 0x400000, 0x5, 0x89a, 0x7fffffff, 0x1ff, 0x4, 0x5, 0x2, 0x0, 0x1ff, 0x0, 0x6, 0xfffffff9, 0x12d, 0x5664, 0x7, 0x3a, 0x4, 0x86, 0x6, 0x0, 0x3, 0xb, 0x1, 0x6, 0x6, 0x2, 0x1, 0x4, 0x7, 0xff, 0x5, 0xffffff36, 0x7fffffff, 0x5b3, 0x3, 0x3, 0x5, 0x80, 0xd, 0x5, 0x7f, 0x7ff, 0x2, 0x3, 0xfffffff9, 0xffff, 0x800, 0x9, 0xf, 0x1, 0x0, 0x9, 0x9, 0x23, 0x3180000, 0xf, 0x5, 0x3cc0, 0x7, 0xf, 0xfffffffb, 0x1, 0x3, 0x1, 0x80000000, 0xff, 0x5, 0xb7, 0xfffffffb, 0x8, 0x101, 0x200, 0x7, 0x3, 0x80000001, 0x8, 0x2, 0x1, 0xc67a, 0x2, 0x9, 0x0, 0x1, 0x9, 0x6, 0x4, 0x7fffffff, 0x7d6b, 0x5, 0xf, 0x10000, 0x8, 0x2, 0xf, 0x6, 0xb, 0x6, 0x8, 0x7, 0x1, 0x593b, 0x8001, 0x6, 0xa227, 0x5, 0x2, 0x3fff8, 0x2, 0x81, 0x6, 0x4, 0x3, 0x98dd931, 0x86, 0xc000000, 0x3ff, 0xc9, 0x8000, 0x400, 0x5, 0x7, 0x6, 0x1, 0x1, 0x7, 0x5, 0x5, 0x6, 0x2, 0x2, 0x10, 0xfffffff8, 0x9, 0x2, 0x0, 0x6, 0xfffffffe, 0x7f, 0xffff, 0x100, 0xfffffffb, 0x4, 0x5, 0xe, 0x3, 0x4, 0x6, 0x5, 0x2800, 0x7, 0x0, 0x5, 0x3, 0x80, 0x1, 0x0, 0x10000, 0xe111, 0x1eb, 0x6, 0x0, 0x4, 0xeb1, 0xf, 0x0, 0x401, 0x5, 0x8, 0xf7c, 0x7ff, 0xf, 0x6, 0x9, 0x9, 0x9, 0x1, 0xc, 0x5, 0x29ee, 0x8001, 0x9, 0xfffffffa, 0x6, 0x0, 0x6, 0xe, 0x8, 0x80000001, 0x9, 0x94, 0x8, 0x0, 0xffffffff, 0x8, 0xa8, 0x0, 0x8, 0x3, 0xb, 0x1, 0xfff, 0x8, 0x7, 0x1ea8, 0x7, 0x400, 0x1, 0xd, 0x7, 0x5, 0x4, 0x3, 0x3, 0x6d, 0x9, 0x3, 0x42f1, 0x9, 0x6, 0x7, 0x5, 0xf853, 0x3727, 0x7, 0x5, 0x3, 0x9, 0x19e67c23, 0x4, 0x6, 0xffff, 0xb, 0x67f, 0xf29c, 0x1ff, 0x5, 0x8, 0x0, 0xffff, 0x4, 0xe, 0x0, 0x1, 0xd, 0x7, 0x0, 0x200, 0x3, 0xb, 0x5, 0x8, 0x4, 0x0, 0x7, 0xfda5, 0x8, 0x1, 0x3599, 0x10001, 0x0, 0x10001, 0x2e, 0x6, 0x6000000, 0x1ff, 0x8, 0x2, 0x2c, 0x2, 0xc56, 0x6, 0x337, 0x7, 0x7, 0x7, 0x3, 0x4, 0x401, 0x95, 0xa, 0x4, 0x800, 0x3, 0x2, 0x6, 0xffff, 0x9, 0x5, 0x800, 0x6, 0x800, 0x3f76969a, 0x1, 0x1, 0x1, 0xfffffff9, 0x3c15, 0x100, 0x3, 0x8, 0x7, 0x1, 0x5, 0xb, 0xc3, 0x1, 0x10001, 0x47, 0x2, 0x8e, 0xd, 0x4, 0x1, 0x8, 0x7, 0x7, 0x7, 0x8000, 0x8, 0x8, 0x3, 0x6, 0xf21, 0x100, 0xa81, 0x2, 0xfffffff4, 0x0, 0x5, 0x0, 0x890e, 0x25cd, 0x1, 0x7, 0x35c2, 0xfffffff2, 0x4, 0xfffff001, 0x8, 0x8, 0x7, 0x5, 0x3, 0x55528ed5, 0x8, 0x2, 0x7, 0x7ff, 0x8, 0x3, 0x6, 0x9, 0x7fff, 0xf, 0x1, 0xebf, 0x4, 0xffffffdb, 0x2, 0x5, 0x8, 0x391, 0x8, 0x3ff, 0x7, 0x0, 0x7fff, 0x5, 0x2, 0x80000000, 0x7, 0x2, 0x3ff, 0x4, 0x7, 0x9, 0x8, 0x2, 0x1000, 0x7f, 0x9, 0x7, 0x9, 0x1, 0xffffffff, 0x5, 0x8, 0x77bc9e21, 0x2, 0x120, 0x6, 0x3, 0x2, 0x4, 0x3, 0x4, 0x7, 0x1, 0x6, 0xffffffff, 0x5, 0xd2a, 0xfffffffe, 0x1, 0x9, 0x7, 0x3db, 0x8, 0x7, 0xfffffffb, 0x6, 0x1, 0x5, 0x2, 0x8, 0x9f, 0x2f8, 0x7ff, 0x4, 0x7fffffff, 0xa1db, 0x56660772, 0x7, 0x7, 0x1ff, 0x4, 0x7, 0x6000, 0x96, 0x6, 0x7, 0x2, 0xb4, 0x3, 0xe7b, 0x0, 0x5, 0x71bd73f0, 0x1, 0x4, 0x2, 0x4, 0x8, 0x6000, 0x7, 0x4, 0x3, 0x48000, 0x6, 0xfff, 0x4, 0xffff6dc2, 0x10, 0xff, 0x7, 0x2, 0x80000000, 0x0, 0x3, 0x427f, 0x2, 0x8, 0x9, 0x1, 0xc1, 0x10001, 0x1, 0x4, 0x2, 0x7, 0x48, 0x8001, 0xffffffff, 0x4, 0x4, 0x3, 0x400, 0x10, 0x7, 0x6, 0x7, 0x12000, 0x1000, 0xfffffffd, 0x1, 0x3, 0x9, 0x100, 0x2, 0x4, 0x2020000, 0x240, 0x8, 0x60b, 0x9, 0x1, 0x6, 0x1000, 0x9, 0x10, 0x1, 0x1, 0x2, 0x7, 0x1, 0x390, 0x400, 0x6, 0x5, 0x5, 0x2, 0x0, 0x8001, 0x7f, 0x9, 0x601, 0xffff, 0x6, 0x7, 0x9, 0x6, 0xc, 0xfffffffa, 0x3, 0xb99a, 0x7262, 0x8, 0x392f, 0x80000000, 0x10, 0x2, 0xfffffffb, 0xed, 0xa, 0x28000000, 0xed, 0x7f10, 0xffffffff, 0xfffffffc, 0x81, 0xb4, 0x3, 0xa, 0x7, 0x0, 0x3, 0x2968, 0x1, 0x6, 0x0, 0x8f9, 0x1, 0x8, 0x8f4, 0x38, 0x7fff, 0x40, 0x9, 0x101, 0x3, 0x8, 0x810, 0x3, 0x6, 0x4be, 0x5f9a3d43, 0x28, 0x8000, 0x4, 0x401, 0x2265840c, 0xbd6, 0x2, 0x2, 0x7, 0x200, 0xfffffffd, 0xffffff4f, 0x8, 0x0, 0x54db, 0x5, 0x7, 0x45db, 0x4, 0x9, 0x0, 0x6, 0x6, 0x8e, 0x1, 0x7, 0x3, 0x2, 0x5, 0x8, 0xfffffe01, 0x9, 0x6, 0x1, 0x6, 0x2, 0x7, 0x10, 0xc0000, 0x8, 0x401, 0x5, 0x8, 0x97bd, 0xeb, 0x8, 0x5, 0x5, 0xd, 0x7ff, 0x1ff, 0x5, 0x8, 0x3, 0x63a, 0x42f, 0xff, 0x80, 0x4, 0xff, 0x10001]}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000001440)={'\x00', 0x9, 0x5, 0xc, 0x0, 0x40, 0xffffffff, 0xa000, '\x00', 0x1}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001600)={{}, "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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r0, 0x0, 0x65, 0x5f, &(0x7f0000002600)="2110fe0aea70679ac07be1bf3e7e6b8b27f87a8fd5e26b723fe5483cc3788bb99c3573c65aed30193fcbb77a11190f61bcf4bc1c7d0805279f3507c7706aa059fddd71fdb0c7c1b8b2c2af1ceb2148cb90b734de0438f857e656336405f41eb7dc98c66876", &(0x7f0000002680)=""/95, 0x48, 0x0, 0x0, 0x83, 0xfffffffffffffffc, &(0x7f0000002700)="2a81794ab045ee137e79c05b59bc8726946e065848dc83cf54575f4d6b94aa73e4dfc0ce7800e693c0fa755a6c050226376538688f494fc5e1d7a4a1d7c3b84a01e4d5a1d71f193b271fa29d8685f344f647e2fa92e9fc13efba56df742e87f4e616e826caa3da6e358ed361958319ba0ef85ff9d916109f26d3cc8ed9d47a9e67c7e6", 0xc, 0x0, 0x8}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)=@deltfilter={0x44, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffef, 0xc}, {0x3fcc5d7b09082588, 0x8}, {0x5, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0xf4, 0xbe}}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000029c0)=@attr_other={0x0, 0x6, 0x3, &(0x7f0000002980)=0x5}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002a80)=[@text64={0x40, &(0x7f0000002a00)="b805000000b9000000800f01d99967650f01d1660f3a229b2f25000000f2410fb28304000000c7442400f1100000c744240200800000c7442406000000000f011c243e460f01df66b875008ec826f20ff038c4a270f2513b", 0x58}], 0x1, 0x22, &(0x7f0000002ac0)=[@efer={0x2, 0x800}, @dstype0={0x6, 0xe}], 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002b00)={0x0, 0x1, 0x3, 0x1}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002f00)={r5, 0x730, 0xa3a}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000003300)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003340)={'veth1_to_bond\x00'}) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000003480)={&(0x7f0000003380)=[{0x5, 0x40, 0x3, 0x8000000000000001}, {0xc, 0x9, 0x8000000000000000, 0x9, 0x625}, {0x0, 0xc123, 0xe3, 0x0, 0x96}, {0x8, 0x80000001, 0x1000, 0x7, 0x7}, {0x7, 0x6, 0x6, 0xff, 0x9}], 0x5, 0x28, 0xfffc, 0x8}) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000034c0)="97ff5de370cafd572797ae4dc541b3be4f153cb3a5f147609c7a851234bbf0ffd9f0bb5b0baf9bfd6902810672", 0x2d}, {&(0x7f0000003500)="13f4a5d7e0f5e1b0fe0ecf132f805d0307bf91594e83d7b624a87189aa13efe3d695c160b8af6d061a6c01c82156030abad3e4294e619b284623c27d3f4175af12238b6dc13910ebb4640c80c7cd836b43b26a803ec7124909bb2eafdcfb214b09bcc9bdcc1a03bc00c89ce09d92baeb0b1ba2f3018da9f8c580f0feeab61d77ea383bd82ba6", 0x86}, {&(0x7f00000035c0)="c028bf1c1f2b241b0c2da9c864cfd6d12ba85d84d5965e496192a5a47ccfc909a4a77b3ebb54dd925a4fa06ca8fcc673864c36322d20a8f0bad8f665a81ce6489721961b957f434005c76ca1d0037dccb849faf057d264566bd04861490b0b609fd542015c8630e248cafc368b85399f7c3b584d524ad098342f41f6dc28d6d8720419776291f041b1ebd9a17d3860ff5777c4c6bf82ce431422c9fecfc947a59cd6a2289760d91e5db3aee353f1ca3cdc57117f9169fb321ca87535e0285f1a4aa3d2f9d1ed3b1e84894ecf2dca262daec4064e4b055d3083a7a16193476ef666b7dafdc10f", 0xe6}, {&(0x7f00000036c0)="766d4163ce72de2cb7aaa3f9fcd24e8b933288544d55b0eecdbbb6f1c745e04f8bc244d310867551b67e17e00d0ba187852c944415c6528909e7c2d44d8ea139749100a8c845c787869b85ee8f01d155749c21d7c5aa366aafe23ebe2dc6bab5fb9c0ac593ed10f8ccd5b1169c71c069e624b7dfca13b53dee8c2dcbab96530e1204c9633c072761770dafcb036bd4da0d0d958debb892a643830f0d9d668101", 0xa0}], 0x4, &(0x7f00000037c0)=[{0x58, 0x116, 0xa85f, "4ac2ceefa48d910f564271ec1acda0f79393fb27f0de53ea9ce4db56b0ee5b1158a02ab48e44c1ef8ccd6f9143ecee78b324d0de91619b51163f7a580130c45c6a43"}, {0xf0, 0x104, 0xfffffff9, "f52438496c1768ef61ededa5e6a76d002e1daf69e9dedff4d800a603b7a633b4e193247c9479736b0dfd2ca1d9696cbd4dfc55bec4ea81d17e4c9a4b51be0c07c3f3a78e1e828139e5e3e41f574b6bf641ac0364c90d6367232d3fda9b1c74497629cad08a2a276999985b3517fef58e2742c4657aad38b7e9f4dd3ab87dee12ae8886b69c3f5e9a7261c42af4f8e5b4b780992d46abcedcb6c804a996c5237a7ab692535f3edfdd76b12fb68d2059f72489ee8f04045f7c9924397074130244e31ac64bbc5dd68c00ae15d542859ee959dc9f06878fb496ebf96a0c39"}, {0x90, 0x109, 0x1, "1a3cdf173f29781b2f6f904ca7b70466b5c978d06b99b21b9efde77c12de1fabc288b3097b93213f8adcc5ed7fef08ee0b18f84dc6c3435a1ce3820e79a5c636f1736a6aa235d44ea8eac2bc8397df1c4664deea68bf5ef3bb8d7ac67cec73ae8720ca52f87cd565ad68563b168485395b36a7f3f6cbf7c1d838a47a7642f5c4"}], 0x1d8}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x54, &(0x7f0000003a00)=[@in6={0xa, 0x4e24, 0x80, @remote, 0x8000}, @in6={0xa, 0x4e24, 0x800, @local, 0x69fbb8da}, @in6={0xa, 0x4e24, 0xd9, @private2, 0x4}]}, &(0x7f0000003ac0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000003b00)={r6, 0x3}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000003d40)={&(0x7f0000003b40), 0xc, &(0x7f0000003d00)={&(0x7f0000003b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x144, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x130, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7ff}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x4c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x43bb}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '\r^\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x10001}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '\xaa\xaa\xaa\xaa\xaa'}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0x16c}, 0x1, 0x0, 0x0, 0x20000890}, 0x80) ioctl$KVM_RUN(r0, 0xae80, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000003d80), &(0x7f0000003dc0), 0x2, 0x1) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000003e40), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r8, 0x304, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) sendmsg$can_bcm(r7, &(0x7f00000040c0)={&(0x7f0000003f80), 0x10, &(0x7f0000004080)={&(0x7f0000004000)={0x0, 0x800, 0x7a6, {}, {}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "09c5f834428ad02fc9630c5e74d51f958030e29afd35627167c26986f643aa3c1e54e3505ea555d4ded446f5d44259f05935f142941983831d9df0a7de5fb0b8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.27545323s ago: executing program 2 (id=1800): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00', 0x0}) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') (async) symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x1, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', r3, &(0x7f0000000440)='./file0\x00', 0x4) (async) unlink(&(0x7f00000003c0)='configs/c.1/gser.usb0\x00') 2.275253886s ago: executing program 2 (id=1801): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x2}, 0x8, 0x203fffff, 0x300, 0x0, 0x2, 0x20000, 0x0}) 2.269759913s ago: executing program 2 (id=1802): syz_clone3(&(0x7f0000000340)={0x2000100, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100), {0x2c}, &(0x7f0000000140)=""/55, 0x37, &(0x7f0000000200)=""/85, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) lseek(r0, 0x5, 0x3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000400)='./file1\x00') r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) ppoll(&(0x7f0000000180)=[{r2, 0x820}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getdents64(r1, &(0x7f0000000180)=""/34, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80101, 0x101) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) creat(&(0x7f0000000080)='./file1\x00', 0xec) 2.269169345s ago: executing program 4 (id=1803): ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="64d11a80633efb5f5906bcb033417c0ee031cbe5ca30e561736ed8db0928342034630407e59b4174896634337d18ff81c89be18009eff0164ddb92c8b2af745a78b2191071a16c94e42c4b2d0a1489f595de6fe6e0a98934458cb46ea868af") (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/136, &(0x7f0000000180)=0x88) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x40, 0x6}, 0x8) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000002c0)={{r2}, "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"}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x1900) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001300)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001340)={0x1000, 0x2, 0x0, 0x9, r1}, &(0x7f0000001380)=0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r0, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r5}, &(0x7f0000001480), &(0x7f00000014c0)=r0}, 0x20) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001540)={0x6, {0x7, 0x80, 0x4, 0x6}, {0x200, 0x9, 0x1, 0x52}, {0x6, 0x1}}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r3) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, r6, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000016c0)={r1, 0x76}, 0x8) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001700)=0x80000000) r7 = accept$inet6(r3, &(0x7f0000001740)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001780)=0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r2, {0x78000}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001980)={'vxcan0\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a40)={0xb34, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x2, 0x7, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000001880)='syzkaller\x00', 0xffff, 0xbc, &(0x7f00000018c0)=""/188, 0x40f00, 0x20, '\x00', r9, @fallback=0x6, r0, 0x8, &(0x7f00000019c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x10, 0xb82, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001a80)=[{0x1, 0x5, 0x7, 0x1}, {0x0, 0x5, 0xa, 0x4}], 0x10, 0x4}, 0x94) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x3c, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x26}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x53}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7d}]}, 0x3c}}, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001d00)={r4, 0x7fffffff}, &(0x7f0000001d40)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001d80)={r12, @in6={{0xa, 0x4e22, 0x8, @loopback, 0x5}}}, 0x84) fchdir(0xffffffffffffffff) 2.268936764s ago: executing program 2 (id=1804): r0 = socket(0x10, 0x3, 0x0) epoll_create1(0x59c85526c465fe9a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 6 (id=1805): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0d#1') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) kernel console output (not intermixed with test programs): e= 0.40 [ 189.281340][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.284790][ T24] usb 10-1: Product: syz [ 189.295866][ T24] usb 10-1: Manufacturer: syz [ 189.317150][T11027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 189.323860][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 189.327627][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 189.334440][ T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 189.336468][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 189.459052][T11072] SELinux: ebitmap: empty map [ 189.462995][T11072] SELinux: failed to load policy [ 189.523575][ T1046] usb 10-1: USB disconnect, device number 16 [ 189.639738][T11080] netlink: 'syz.2.1181': attribute type 10 has an invalid length. [ 190.226457][T11105] vlan2: entered promiscuous mode [ 190.228317][T11105] bridge0: entered promiscuous mode [ 190.374044][T11112] team0 (unregistering): Port device team_slave_0 removed [ 190.381614][ T7613] libceph: connect (1)[c::]:6789 error -101 [ 190.384060][ T7613] libceph: mon0 (1)[c::]:6789 connect error [ 190.385942][T11112] team0 (unregistering): Port device team_slave_1 removed [ 190.448310][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'. [ 190.451527][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'. [ 190.569850][T11131] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 190.640335][ T7613] libceph: connect (1)[c::]:6789 error -101 [ 190.646561][ T7613] libceph: mon0 (1)[c::]:6789 connect error [ 190.969887][ T7613] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 191.123137][ T7613] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.125884][ T7613] usb 10-1: config 0 has no interface number 0 [ 191.127848][ T7613] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.131602][ T7613] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 191.135186][ T7613] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 191.138688][ T7613] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 191.142358][ T7613] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.146313][ T7613] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.149138][ T7613] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.153283][ T7613] usb 10-1: config 0 descriptor?? [ 191.156456][T11144] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 191.161663][ T7613] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.171185][ T7613] libceph: connect (1)[c::]:6789 error -101 [ 191.172959][T11117] ceph: No mds server is up or the cluster is laggy [ 191.173236][ T7613] libceph: mon0 (1)[c::]:6789 connect error [ 191.224844][T11147] netlink: 'syz.4.1201': attribute type 62 has an invalid length. [ 191.287379][ T42] kauditd_printk_skb: 143 callbacks suppressed [ 191.287393][ T42] audit: type=1400 audit(1785951230.929:1304): avc: denied { create } for pid=11146 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.294892][T11149] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 191.295876][ T42] audit: type=1400 audit(1785951230.939:1305): avc: denied { write } for pid=11146 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.305405][T11147] lo speed is unknown, defaulting to 1000 [ 191.316433][T11147] lo speed is unknown, defaulting to 1000 [ 191.321762][T11147] lo speed is unknown, defaulting to 1000 [ 191.365075][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.370107][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.388491][ T42] audit: type=1400 audit(1785951231.029:1306): avc: denied { create } for pid=11143 comm="syz.5.1200" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 191.448877][ T5839] usb 10-1: USB disconnect, device number 17 [ 191.483875][T11161] binder: 11159:11161 ioctl c0306201 200000000640 returned -22 [ 191.484413][ T42] audit: type=1400 audit(1785951231.129:1307): avc: denied { read } for pid=11159 comm="syz.5.1204" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.486526][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 191.488091][T11163] net_ratelimit: 31 callbacks suppressed [ 191.488101][T11163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.490405][T11162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.496923][ T5839] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 191.501834][ T42] audit: type=1400 audit(1785951231.129:1308): avc: denied { open } for pid=11159 comm="syz.5.1204" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.501862][ T42] audit: type=1400 audit(1785951231.129:1309): avc: denied { ioctl } for pid=11159 comm="syz.5.1204" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.501886][ T42] audit: type=1400 audit(1785951231.129:1310): avc: denied { set_context_mgr } for pid=11159 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.501906][ T42] audit: type=1400 audit(1785951231.129:1311): avc: denied { write } for pid=11159 comm="syz.5.1204" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.506639][T11162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 191.548881][T11162] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.556609][T11162] vhci_hcd vhci_hcd.0: Device attached [ 191.560851][T11166] vhci_hcd: connection closed [ 191.563915][ T5812] vhci_hcd vhci_hcd.2: stop threads [ 191.570392][ T5812] vhci_hcd vhci_hcd.2: release socket [ 191.572192][ T5812] vhci_hcd vhci_hcd.2: disconnect device [ 191.597845][ T42] audit: type=1400 audit(1785951231.239:1312): avc: denied { create } for pid=11169 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.619071][T11147] infiniband sz1: set active [ 191.620900][ T5627] lo speed is unknown, defaulting to 1000 [ 191.622952][T11147] infiniband sz1: added lo [ 191.641240][T11147] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.646961][T11147] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.649915][ T1046] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 191.654523][T11147] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.657182][ T42] audit: type=1400 audit(1785951231.299:1313): avc: denied { connect } for pid=11169 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.658144][T11172] overlay: Unknown parameter 'hash' [ 191.679871][T11147] RDS/IB: sz1: added [ 191.681753][T11147] smc: adding ib device sz1 with port count 1 [ 191.684352][T11147] smc: ib device sz1 port 1 has no pnetid [ 191.687724][ T34] lo speed is unknown, defaulting to 1000 [ 191.691930][T11147] lo speed is unknown, defaulting to 1000 [ 191.823171][ T1046] usb 9-1: config 0 has no interfaces? [ 191.827750][ T1046] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.829890][T11147] lo speed is unknown, defaulting to 1000 [ 191.832132][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.840951][ T1046] usb 9-1: config 0 descriptor?? [ 191.969530][T11147] lo speed is unknown, defaulting to 1000 [ 192.057322][T11147] lo speed is unknown, defaulting to 1000 [ 192.175108][T11147] lo speed is unknown, defaulting to 1000 [ 192.228449][T11183] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1207'. [ 192.271901][T11147] lo speed is unknown, defaulting to 1000 [ 192.422482][ T24] usb 9-1: USB disconnect, device number 13 [ 192.446986][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 192.489358][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1211'. [ 192.566272][T11196] netlink: 'syz.5.1213': attribute type 1 has an invalid length. [ 192.569628][T11196] netlink: 'syz.5.1213': attribute type 1 has an invalid length. [ 192.573596][T11196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11196 comm=syz.5.1213 [ 192.638829][T11204] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1215'. [ 192.737730][ T61] gsmld_receive_buf: 00000000: 72 f7 r. [ 192.743257][ T61] gsmld_receive_buf: 00000000: 5e 4b 67 bb b8 fb b6 f9 ff 48 66 27 d6 c3 31 ed ^Kg......Hf'..1. [ 192.748224][ T61] gsmld_receive_buf: 00000010: 4b 9e 5e 48 a9 5e 4c 08 20 08 08 20 08 08 20 08 K.^H.^L. .. .. . [ 192.755976][ T61] gsmld_receive_buf: 00000020: 08 20 08 08 20 08 08 20 08 08 20 08 08 20 08 08 . .. .. .. .. .. [ 192.760606][ T61] gsmld_receive_buf: 00000030: 20 08 08 20 08 08 20 08 08 20 08 08 20 08 08 20 .. .. .. .. .. [ 192.764885][ T61] gsmld_receive_buf: 00000040: 08 08 20 08 08 20 08 08 20 08 08 20 08 08 20 08 .. .. .. .. .. . [ 192.770713][ T61] gsmld_receive_buf: 00000050: 08 20 08 08 20 08 08 20 08 08 20 08 08 20 08 08 . .. .. .. .. .. [ 192.782857][ T61] gsmld_receive_buf: 00000060: 20 08 bc 5d b5 60 94 5e 52 0d 0a bc 5d b5 60 94 ..].`.^R...].`. [ 192.797242][ T61] gsmld_receive_buf: 00000070: b7 bd c6 61 a9 f9 c3 7a 7d ad 8f f5 3f 53 dd ac ...a...z}...?S.. [ 192.806533][ T61] gsmld_receive_buf: 00000080: 96 74 55 21 ba 9e b7 e8 48 69 90 fb c9 48 b0 a8 .tU!....Hi...H.. [ 192.814795][ T61] gsmld_receive_buf: 00000090: 6e b3 72 36 5a 45 df a3 f5 c5 5e 5e 7a 52 26 27 n.r6ZE....^^zR&' [ 192.825321][ T61] gsmld_receive_buf: 000000a0: f1 5e 50 f1 6c 59 7e 85 5e 41 2a df de 2d b9 c6 .^P.lY~.^A*..-.. [ 192.830578][ T61] gsmld_receive_buf: 000000b0: 37 75 74 77 5e 59 c7 89 46 a3 fa f1 eb 79 21 77 7utw^Y..F....y!w [ 192.834824][ T61] gsmld_receive_buf: 000000c0: 44 42 aa d7 8f f7 8a d4 30 63 c1 f3 73 93 64 ce DB......0c..s.d. [ 192.844202][ T61] gsmld_receive_buf: 000000d0: cb 30 9a 4a 5e 4c 75 47 ed 5e 08 67 91 f0 df 96 .0.J^LuG.^.g.... [ 192.848821][ T61] gsmld_receive_buf: 000000e0: a2 0d 0a 5e 59 3e 89 ff e4 dd a9 42 ...^Y>.....B [ 193.019607][ T61] rpcbind: server 127.0.0.1 not responding, timed out [ 193.036714][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1223'. [ 193.043555][T11230] openvswitch: netlink: Missing key (keys=40, expected=100) [ 193.048383][ T5839] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 193.200403][ T5839] usb 10-1: Using ep0 maxpacket: 8 [ 193.213366][ T5839] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 193.219071][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.224989][ T5839] usb 10-1: Product: syz [ 193.229729][ T5839] usb 10-1: Manufacturer: syz [ 193.231665][ T5839] usb 10-1: SerialNumber: syz [ 193.250019][ T5839] usb 10-1: config 0 descriptor?? [ 193.281226][ T5839] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 193.289577][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 193.294138][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.300034][ T5839] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 193.303551][ T5839] usb 10-1: media controller created [ 193.324503][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.432909][T11245] configfs-gadget.g1 gadget.0: HOST MAC 6e:c2:bf:2d:d9:ff [ 193.436160][T11245] configfs-gadget.g1 gadget.0: MAC 72:ad:89:83:e0:fd [ 193.489425][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 193.561540][ T5839] DVB: Unable to find symbol mt352_attach() [ 193.563671][ T5839] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 193.629121][ T5104] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 193.649064][ T5839] rc_core: IR keymap rc-dvico-portable not found [ 193.651239][ T5839] Registered IR keymap rc-empty [ 193.653425][ T5839] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 193.658098][ T5839] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input13 [ 193.677647][ T5839] dvb-usb: schedule remote query interval to 100 msecs. [ 193.680238][ T5839] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 193.695130][T11218] batadv_slave_1: entered promiscuous mode [ 193.738574][T11218] batadv_slave_1: left promiscuous mode [ 193.751151][T11263] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 193.778753][ T34] usb 10-1: USB disconnect, device number 18 [ 193.780324][ T5104] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 193.785710][ T5104] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 193.790446][ T5104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.793037][ T5104] usb 7-1: Product: syz [ 193.795092][ T5104] usb 7-1: Manufacturer: syz [ 193.797121][ T5104] usb 7-1: SerialNumber: syz [ 193.807703][T11244] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 193.812465][ T5104] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 193.816540][ T5104] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 193.826533][ T5104] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 193.856473][ T34] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 193.939205][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.021526][T11283] tipc: Resetting bearer [ 194.055049][ T5104] usb 7-1: Firmware "emi26/loader.fw" not valid IHEX records [ 194.057653][ T5104] usb 7-1: emi26_load_firmware - request_firmware() failed [ 194.065307][ T5104] usb 7-1: emi26_load_firmware - error loading firmware: error = -22 [ 194.076469][ T5104] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 194.081066][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 194.090514][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093300][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.100051][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 194.103491][ T5104] usb 7-1: USB disconnect, device number 24 [ 194.105869][ T24] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 194.112244][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.141303][T11283] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 194.144408][T11283] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 194.218855][ T24] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 6e:c2:bf:2d:d9:ff [ 194.378121][ T24] hid (null): unknown global tag 0xd [ 194.383648][ T24] hid (null): unknown global tag 0xc [ 194.385863][ T24] hid (null): invalid report_size -37427702 [ 194.388199][ T24] hid (null): invalid report_size 38426 [ 194.401599][ T24] hid (null): unknown global tag 0xc [ 194.420250][ T24] hid-generic 0755:0401:0007.0008: unknown global tag 0xd [ 194.422682][ T24] hid-generic 0755:0401:0007.0008: item 0 4 1 13 parsing failed [ 194.425508][ T24] hid-generic 0755:0401:0007.0008: probe with driver hid-generic failed with error -22 [ 194.538640][ T1046] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 194.698930][ T1046] usb 9-1: Using ep0 maxpacket: 32 [ 194.722056][ T1046] usb 9-1: unable to get BOS descriptor or descriptor too short [ 194.736802][ T1046] usb 9-1: string descriptor 0 read error: -22 [ 194.742491][ T1046] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 194.750435][ T1046] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 194.784050][ T1046] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 194.791892][ T1046] dw2102: su3000_power_ctrl: 1, initialized 0 [ 194.794581][ T1046] dvb-usb: bulk message failed: -22 (2/0) [ 194.825088][ T1046] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.837295][ T1046] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 194.843488][ T1046] usb 9-1: media controller created [ 194.850576][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.862267][ T1046] dw2102: i2c transfer failed. [ 194.866501][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.870008][ T1046] dw2102: i2c transfer failed. [ 194.871529][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.873361][ T1046] dw2102: i2c transfer failed. [ 194.874933][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.876803][ T1046] dw2102: i2c transfer failed. [ 194.878466][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.880261][ T1046] dw2102: i2c transfer failed. [ 194.881821][ T1046] dvb-usb: bulk message failed: -22 (6/0) [ 194.884459][ T1046] dw2102: i2c transfer failed. [ 194.886284][ T1046] dvb-usb: MAC address: 02:02:02:02:02:02 [ 194.899968][ T1046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.923569][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 194.929016][ T1046] dw2102: command 0x0e transfer failed. [ 194.943772][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 194.958880][ T1046] dw2102: command 0x0e transfer failed. [ 194.981744][T11344] lo speed is unknown, defaulting to 1000 [ 195.103237][T11357] 9p: Bad value for 'version' [ 195.268300][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 195.271653][ T1046] dw2102: command 0x0e transfer failed. [ 195.288241][ T1046] dvb-usb: bulk message failed: -22 (3/0) [ 195.290087][ T1046] dw2102: command 0x0e transfer failed. [ 195.299869][ T1046] dvb-usb: bulk message failed: -22 (1/0) [ 195.301764][ T1046] dw2102: command 0x51 transfer failed. [ 195.311363][T11299] dvb-usb: bulk message failed: -22 (22/0) [ 195.319383][T11299] dw2102: i2c transfer failed. [ 195.377930][ T1046] DVB: Unable to find symbol ds3000_attach() [ 195.382994][ T1046] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 195.435006][T11375] tipc: Resetting bearer [ 195.477148][ T1046] rc_core: IR keymap rc-su3000 not found [ 195.480081][ T1046] Registered IR keymap rc-empty [ 195.484764][ T1046] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 195.504115][ T1046] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input14 [ 195.517220][ T1046] dvb-usb: schedule remote query interval to 150 msecs. [ 195.520450][ T1046] dw2102: su3000_power_ctrl: 0, initialized 1 [ 195.527462][ T1046] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 195.537638][ T5104] usb 9-1: USB disconnect, device number 14 [ 195.581507][ T5104] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 195.823225][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1258'. [ 195.927077][T11394] CIFS: VFS: UNC: path must begin with // or \\ [ 195.929383][T11394] Malformed UNC in devname [ 195.929383][T11394] [ 195.932077][T11394] CIFS: VFS: Malformed UNC in devname [ 196.036415][T11399] input: syz1 as /devices/virtual/input/input15 [ 196.239547][T11405] 9p: Bad value for 'version' [ 196.400837][T11413] : renamed from vlan0 (while UP) [ 196.420806][ T42] kauditd_printk_skb: 118 callbacks suppressed [ 196.420827][ T42] audit: type=1400 audit(1785951236.061:1432): avc: denied { mounton } for pid=11412 comm="syz.2.1264" path="/82/file0" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 196.444536][ T42] audit: type=1400 audit(1785951236.081:1433): avc: denied { mount } for pid=11412 comm="syz.2.1264" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 196.518776][ T42] audit: type=1400 audit(1785951236.161:1434): avc: denied { unmount } for pid=9867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 196.521561][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 196.543944][T11416] nbd: socks must be embedded in a SOCK_ITEM attr [ 196.563734][ T42] audit: type=1400 audit(1785951236.201:1435): avc: denied { write } for pid=11415 comm="syz.4.1265" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.592152][ T42] audit: type=1404 audit(1785951236.211:1436): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 196.620083][ T42] audit: type=1400 audit(1785951236.261:1437): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=0 [ 196.634064][ T42] audit: type=1400 audit(1785951236.261:1438): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=0 [ 196.655140][ T42] audit: type=1404 audit(1785951236.291:1439): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 196.663566][ T42] audit: type=1400 audit(1785951236.291:1440): avc: denied { create } for pid=11421 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.694145][ T42] audit: type=1400 audit(1785951236.331:1441): avc: denied { write } for pid=11419 comm="syz.5.1268" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 196.996170][T11444] 9p: Bad value for 'version' [ 197.105899][T11449] netlink: 'syz.2.1276': attribute type 2 has an invalid length. [ 197.113303][T11449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1276'. [ 197.516961][T11479] 9p: Bad value for 'version' [ 197.896505][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.904284][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.912516][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.922715][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.933408][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.944695][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.953352][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.962326][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 197.971851][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 198.062994][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11498 comm=syz.4.1289 [ 198.145477][T11505] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1290'. [ 198.445746][T11523] 9p: Bad value for 'version' [ 198.999663][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 199.024321][T11542] macvlan26: entered allmulticast mode [ 199.045855][T11542] 8021q: adding VLAN 0 to HW filter on device macvlan26 [ 199.323519][T11560] 9p: Bad value for 'version' [ 199.397326][ T5104] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 199.409983][T11552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.672501][T11552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.986766][T11552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.145084][T11552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.289238][ T5891] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.316185][ T5891] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.336470][ T5891] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.360468][ T7395] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.967564][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 201.019624][T11594] macvlan27: entered allmulticast mode [ 201.055747][T11594] 8021q: adding VLAN 0 to HW filter on device macvlan27 [ 201.137582][T11600] netlink: 'syz.4.1309': attribute type 64 has an invalid length. [ 201.191958][ T5627] lo speed is unknown, defaulting to 1000 [ 201.293451][T11608] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 201.340017][T11611] 9p: Bad value for 'version' [ 201.428778][ T42] kauditd_printk_skb: 134 callbacks suppressed [ 201.428798][ T42] audit: type=1400 audit(1785951241.072:1576): avc: denied { append } for pid=11615 comm="syz.4.1313" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.455309][T11616] loop5: detected capacity change from 0 to 7 [ 201.475216][T11616] Dev loop5: unable to read RDB block 7 [ 201.481962][T11616] loop5: AHDI p2 [ 201.483328][T11616] loop5: partition table partially beyond EOD, truncated [ 201.647259][T11618] gtp0: entered promiscuous mode [ 201.647276][T11618] gtp0: entered allmulticast mode [ 201.670640][T11618] team0: Device gtp0 is of different type [ 201.689448][ T42] audit: type=1400 audit(1785951241.332:1577): avc: denied { write } for pid=11626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.764798][ T42] audit: type=1400 audit(1785951241.402:1578): avc: denied { write } for pid=11632 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.297280][ T5104] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 202.304215][ T5104] usb 7-1: can't read configurations, error -71 [ 202.530312][ T42] audit: type=1326 audit(1785951242.172:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.552992][T11644] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 202.555700][T11644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.557310][ T42] audit: type=1326 audit(1785951242.172:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.561029][T11644] vhci_hcd vhci_hcd.0: Device attached [ 202.574811][ T42] audit: type=1326 audit(1785951242.172:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.588009][ T42] audit: type=1326 audit(1785951242.172:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.604756][ T42] audit: type=1326 audit(1785951242.212:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.619105][ T42] audit: type=1326 audit(1785951242.222:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.631039][T11653] 9p: Bad value for 'rfdno' [ 202.636228][ T42] audit: type=1326 audit(1785951242.222:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.1319" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9d6199df99 code=0x7ffc0000 [ 202.670025][T11648] vhci_hcd: connection closed [ 202.676415][ T12] vhci_hcd vhci_hcd.5: stop threads [ 202.681791][T11655] MINIX-fs: unable to read superblock [ 202.689244][ T12] vhci_hcd vhci_hcd.5: release socket [ 202.699521][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 202.766388][ T1046] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 202.768787][ T5627] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 202.940545][ T1046] usb 9-1: config 0 has no interfaces? [ 202.942361][ T1046] usb 9-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 202.945117][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.950368][ T1046] usb 9-1: config 0 descriptor?? [ 203.268855][T11669] 9p: Bad value for 'version' [ 203.337948][T11640] lo speed is unknown, defaulting to 1000 [ 203.428401][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 203.541855][T11642] lo speed is unknown, defaulting to 1000 [ 203.706001][ T1351] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 203.835962][ T1046] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 203.887154][ T1351] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 203.889841][ T1351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.893182][ T1351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.897565][ T1351] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.901641][ T1351] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.904930][ T1351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.930038][ T1351] usb 10-1: config 0 descriptor?? [ 203.988508][ T5847] usb 9-1: USB disconnect, device number 15 [ 204.020928][ T1046] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 204.023677][ T1046] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 204.034414][ T1046] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 204.037768][ T1046] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.041696][ T1046] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.044472][ T1046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.257690][ T1046] usb 7-1: GET_CAPABILITIES returned 0 [ 204.259474][ T1046] usbtmc 7-1:16.0: can't read capabilities [ 204.441940][ T1351] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 204.464713][T11681] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 204.475533][T11681] netlink: 'syz.2.1328': attribute type 2 has an invalid length. [ 204.485424][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 204.489524][ T1046] usb 7-1: USB disconnect, device number 28 [ 204.495648][ T1351] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 204.544211][ T34] usb 10-1: USB disconnect, device number 19 [ 205.041524][T11702] 9p: Bad value for 'version' [ 205.202926][T11709] netlink: 'syz.4.1336': attribute type 29 has an invalid length. [ 205.291233][T11717] netlink: 'syz.4.1340': attribute type 4 has an invalid length. [ 205.420768][T11729] kAFS: unable to lookup cell 'syz1' [ 206.081384][T11748] netlink: 'syz.5.1346': attribute type 12 has an invalid length. [ 206.462658][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 206.462671][ T42] audit: type=1400 audit(1785951246.103:1648): avc: denied { write } for pid=11769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.542892][ T42] audit: type=1400 audit(1785951246.183:1649): avc: denied { write } for pid=11777 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.559475][ T42] audit: type=1400 audit(1785951246.203:1650): avc: denied { create } for pid=11780 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.561023][T11779] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 206.569058][ T42] audit: type=1400 audit(1785951246.203:1651): avc: denied { lock } for pid=11780 comm="syz.5.1356" path="socket:[46403]" dev="sockfs" ino=46403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 206.605139][T11779] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 206.609797][T11779] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 206.618220][ T42] audit: type=1400 audit(1785951246.263:1652): avc: denied { write } for pid=11780 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.618671][T11779] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 206.628982][T11779] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 206.637874][T11779] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 206.670385][T11779] pci 0000:00:01.0: Adding to iommu group 1 [ 206.681512][T11779] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 206.683822][T11779] pci 0000:00:01.0: vgaarb: bridge control possible [ 206.686374][T11779] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 206.698397][T11779] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 206.713636][T11779] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 206.729153][T11779] pci 0000:00:1d.7: Adding to iommu group 7 [ 206.735665][T11779] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 206.750953][T11779] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 206.759683][T11779] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 206.763430][T11779] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned [ 206.810097][ T42] audit: type=1400 audit(1785951246.453:1653): avc: denied { write } for pid=11786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.837254][ T1046] IPVS: starting estimator thread 0... [ 206.858491][T11779] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 206.862384][T11779] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 206.869509][T11779] [drm] features: -virgl +edid -resource_blob -host_visible [ 206.869523][T11779] [drm] features: -context_init -blob_alignment [ 206.888599][ T42] audit: type=1400 audit(1785951246.533:1654): avc: denied { write } for pid=11792 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.895712][T11790] xt_hashlimit: size too large, truncated to 1048576 [ 206.948059][ T42] audit: type=1400 audit(1785951246.583:1655): avc: denied { create } for pid=11788 comm="syz.4.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.955386][T11791] IPVS: using max 43 ests per chain, 103200 per kthread [ 206.973787][T11779] [drm] number of scanouts: 1 [ 206.975656][T11779] [drm] number of cap sets: 0 [ 207.077686][T11779] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 207.135133][T11779] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 207.178175][T11779] pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 207.182901][T11779] pci 0000:00:1d.7: Can't enable PCI device, BIOS handoff failed. [ 207.185997][T11779] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 37313 usecs [ 207.186401][ T42] audit: type=1400 audit(1785951246.833:1656): avc: denied { write } for pid=11800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.247033][ T42] audit: type=1400 audit(1785951246.893:1657): avc: denied { create } for pid=11802 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.271550][ T6858] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 207.500698][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 207.506652][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 207.577858][T11822] syz.2.1362 (11822) used greatest stack depth: 19120 bytes left [ 207.652176][T11832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.969773][T11840] netlink: 'syz.2.1367': attribute type 322 has an invalid length. [ 208.117379][T11840] tipc: Resetting bearer [ 208.286702][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1368'. [ 208.329022][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.892892][T11876] ucma_write: process 251 (syz.5.1378) changed security contexts after opening file descriptor, this is not allowed. [ 209.018693][T11878] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 209.028332][T11878] SELinux: failed to load policy [ 209.397337][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.530511][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.558752][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.567235][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.577315][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.615514][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.620010][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.647798][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.807216][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.912866][T11881] lo speed is unknown, defaulting to 1000 [ 210.074512][T11909] 9p: Bad value for 'rfdno' [ 210.122693][T11908] gfs2: not a GFS2 filesystem [ 210.166223][ T12] bridge_slave_1: left allmulticast mode [ 210.169669][ T12] bridge_slave_1: left promiscuous mode [ 210.174301][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.196749][ T12] bridge_slave_0: left allmulticast mode [ 210.200325][ T12] bridge_slave_0: left promiscuous mode [ 210.203106][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.213683][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 210.454337][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.462991][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.468697][ T12] bond0 (unregistering): Released all slaves [ 210.537905][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 210.990816][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 211.149775][ T12] hsr_slave_0: left promiscuous mode [ 211.157337][ T12] hsr_slave_1: left promiscuous mode [ 211.159468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.173221][T11956] afs: Unknown parameter '' [ 211.182025][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.184327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.199930][ T12] veth1_macvtap: left promiscuous mode [ 211.201790][ T12] veth0_macvtap: left promiscuous mode [ 211.203791][ T12] veth1_vlan: left promiscuous mode [ 211.205887][ T12] veth0_vlan: left promiscuous mode [ 211.480112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 211.508688][ T12] team0 (unregistering): Port device team_slave_0 removed [ 211.627870][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'. [ 211.675355][ T5744] Bluetooth: hci2: command tx timeout [ 211.681680][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 211.681701][ T42] audit: type=1400 audit(1785951251.324:1692): avc: denied { write } for pid=11959 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 211.687042][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.705221][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.710400][T11881] bridge_slave_0: entered allmulticast mode [ 211.717203][T11881] bridge_slave_0: entered promiscuous mode [ 211.726788][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.731386][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.733561][T11881] bridge_slave_1: entered allmulticast mode [ 211.739900][T11881] bridge_slave_1: entered promiscuous mode [ 211.770475][T11965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.786639][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.792981][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.799705][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.806321][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.813417][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.817221][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.818196][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.875608][T11965] team0: Port device xfrm0 added [ 211.916328][ T42] audit: type=1400 audit(1785951251.554:1693): avc: denied { write } for pid=11969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.987813][ T42] audit: type=1400 audit(1785951251.634:1694): avc: denied { write } for pid=11976 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.042964][T11881] team0: Port device team_slave_0 added [ 212.058055][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 212.065349][T11881] team0: Port device team_slave_1 added [ 212.115681][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.124695][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.135162][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.151644][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.155309][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.165237][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.179437][ T42] audit: type=1400 audit(1785951251.824:1695): avc: denied { write } for pid=11993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.216563][ T42] audit: type=1400 audit(1785951251.864:1696): avc: denied { write } for pid=12000 comm="syz.4.1401" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.251205][T11881] hsr_slave_0: entered promiscuous mode [ 212.255387][T11881] hsr_slave_1: entered promiscuous mode [ 212.258793][ T42] audit: type=1400 audit(1785951251.904:1697): avc: denied { write } for pid=12002 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.265017][T11881] debugfs: 'hsr0' already exists in 'hsr' [ 212.267206][T11881] Cannot create hsr debugfs directory [ 212.274608][ T42] audit: type=1400 audit(1785951251.914:1698): avc: denied { write } for pid=11984 comm="syz.2.1400" name="xfrm_stat" dev="proc" ino=4026533013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 212.387558][T11966] lo speed is unknown, defaulting to 1000 [ 212.447890][ T42] audit: type=1400 audit(1785951252.094:1699): avc: denied { write } for pid=12008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.469245][T11881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.483498][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.486391][T11881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.490918][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.510626][T11881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.520438][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.522677][ T42] audit: type=1400 audit(1785951252.164:1700): avc: denied { write } for pid=12011 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.539830][T11881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.546647][T11881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.668148][ T42] audit: type=1400 audit(1785951252.314:1701): avc: denied { write } for pid=12021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.689342][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.725493][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.749942][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.752485][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.788253][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.790992][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.829535][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.832382][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.835214][T11966] bridge_slave_0: entered allmulticast mode [ 212.838766][T11966] bridge_slave_0: entered promiscuous mode [ 212.843467][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.846732][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.849624][T11966] bridge_slave_1: entered allmulticast mode [ 212.853271][T11966] bridge_slave_1: entered promiscuous mode [ 212.889442][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.906924][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.956234][T11966] team0: Port device team_slave_0 added [ 212.960402][T11966] team0: Port device team_slave_1 added [ 213.012462][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.014832][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.024451][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.036636][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.039071][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.051276][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.111811][T11966] hsr_slave_0: entered promiscuous mode [ 213.117346][T11966] hsr_slave_1: entered promiscuous mode [ 213.119750][T11966] debugfs: 'hsr0' already exists in 'hsr' [ 213.121737][T11966] Cannot create hsr debugfs directory [ 213.180947][T12050] tmpfs: Bad value for 'mpol' [ 213.372754][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 213.469564][T11966] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.480243][T11966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.483726][T11966] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.494356][T11966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.497644][T11966] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.503078][T11966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.509703][T11966] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.518377][T11966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.542017][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.651428][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.661014][T12098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1412'. [ 213.673476][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.684153][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.686855][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.744964][ T5744] Bluetooth: hci2: command tx timeout [ 213.759349][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.762280][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.835138][T11881] veth0_vlan: entered promiscuous mode [ 213.848218][T11881] veth1_vlan: entered promiscuous mode [ 213.876544][T11881] veth0_macvtap: entered promiscuous mode [ 213.886276][T11881] veth1_macvtap: entered promiscuous mode [ 213.901760][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.915335][ T5744] Bluetooth: hci4: command tx timeout [ 213.932222][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.943831][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.950927][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.956719][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.959653][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.063884][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.072891][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.099438][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.101840][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.320128][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.384426][T12130] can0: slcan on ttyS3. [ 214.443514][ T5744] Bluetooth: hci2: unexpected event 0x09 length: 13 > 3 [ 214.505660][T11966] veth0_vlan: entered promiscuous mode [ 214.518110][T11966] veth1_vlan: entered promiscuous mode [ 214.537565][T12130] can0 (unregistered): slcan off ttyS3. [ 214.546393][T11966] veth0_macvtap: entered promiscuous mode [ 214.552739][T11966] veth1_macvtap: entered promiscuous mode [ 214.573994][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.585794][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.596389][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.599764][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.602435][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.606360][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.645378][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1417'. [ 215.528466][ T6846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.530980][ T6846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.555864][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.559330][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.669325][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 215.824553][ T5744] Bluetooth: hci2: command tx timeout [ 215.996274][ T5744] Bluetooth: hci4: command tx timeout [ 216.056896][T12191] FAULT_INJECTION: forcing a failure. [ 216.056896][T12191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.061263][T12191] CPU: 2 UID: 0 PID: 12191 Comm: syz.7.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.061289][T12191] Tainted: [L]=SOFTLOCKUP [ 216.061295][T12191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.061322][T12191] Call Trace: [ 216.061337][T12191] [ 216.061345][T12191] dump_stack_lvl+0x100/0x190 [ 216.061429][T12191] should_fail_ex.cold+0x5/0xa [ 216.061476][T12191] _copy_from_iter+0x1f4/0x1690 [ 216.061562][T12191] ? __lock_acquire+0x49f/0x1a40 [ 216.061605][T12191] ? __pfx__copy_from_iter+0x10/0x10 [ 216.061626][T12191] ? __lock_acquire+0x49f/0x1a40 [ 216.061655][T12191] copy_page_from_iter+0x238/0x300 [ 216.061681][T12191] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 216.061722][T12191] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 216.061739][T12191] ? unwind_get_return_address+0x59/0xa0 [ 216.061765][T12191] ? arch_stack_walk+0xa6/0xf0 [ 216.061812][T12191] ? _kstrtoull+0x13c/0x1f0 [ 216.061828][T12191] ? __pfx__kstrtoull+0x10/0x10 [ 216.061848][T12191] tun_get_user+0x16d6/0x3c20 [ 216.061875][T12191] ? __pfx_tun_get_user+0x10/0x10 [ 216.061894][T12191] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 216.061926][T12191] ? find_held_lock+0x2b/0x80 [ 216.061952][T12191] ? tun_get+0x191/0x370 [ 216.061976][T12191] ? tun_get+0x191/0x370 [ 216.062006][T12191] tun_chr_write_iter+0xdc/0x200 [ 216.062026][T12191] vfs_write+0x6ac/0x1050 [ 216.062068][T12191] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 216.062088][T12191] ? __pfx_vfs_write+0x10/0x10 [ 216.062111][T12191] ? find_held_lock+0x2b/0x80 [ 216.062150][T12191] ksys_write+0x12a/0x250 [ 216.062175][T12191] ? __pfx_ksys_write+0x10/0x10 [ 216.062207][T12191] do_syscall_64+0x115/0x870 [ 216.062234][T12191] ? clear_bhb_loop+0x40/0x90 [ 216.062256][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.062275][T12191] RIP: 0033:0x7f57e215e7ce [ 216.062291][T12191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.062307][T12191] RSP: 002b:00007f57e3123fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.062392][T12191] RAX: ffffffffffffffda RBX: 00007f57e31246c0 RCX: 00007f57e215e7ce [ 216.062403][T12191] RDX: 0000000000000036 RSI: 0000200000000200 RDI: 00000000000000c8 [ 216.062414][T12191] RBP: 00007f57e3124090 R08: 0000000000000000 R09: 0000000000000000 [ 216.062425][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.062435][T12191] R13: 00007f57e2426038 R14: 00007f57e2425fa0 R15: 00007fff516a5558 [ 216.062458][T12191] [ 216.134866][T12194] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1431'. [ 216.169699][T12194] syzkaller1: entered promiscuous mode [ 216.171630][T12194] syzkaller1: entered allmulticast mode [ 216.183096][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1431'. [ 216.201099][T12198] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.346391][T12207] bridge1: entered promiscuous mode [ 216.348060][T12207] bridge1: entered allmulticast mode [ 216.681152][T12243] FAULT_INJECTION: forcing a failure. [ 216.681152][T12243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.686948][T12243] CPU: 3 UID: 0 PID: 12243 Comm: syz.6.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.686981][T12243] Tainted: [L]=SOFTLOCKUP [ 216.686985][T12243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.686992][T12243] Call Trace: [ 216.686996][T12243] [ 216.687001][T12243] dump_stack_lvl+0x100/0x190 [ 216.687022][T12243] should_fail_ex.cold+0x5/0xa [ 216.687038][T12243] _copy_from_user+0x2e/0xd0 [ 216.687055][T12243] kstrtouint_from_user+0xd6/0x1d0 [ 216.687067][T12243] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.687079][T12243] ? __lock_acquire+0x49f/0x1a40 [ 216.687101][T12243] proc_fail_nth_write+0x83/0x220 [ 216.687121][T12243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.687143][T12243] vfs_write+0x2aa/0x1050 [ 216.687163][T12243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.687182][T12243] ? __pfx_vfs_write+0x10/0x10 [ 216.687199][T12243] ? __fget_files+0x215/0x3d0 [ 216.687214][T12243] ? __fget_files+0x21f/0x3d0 [ 216.687230][T12243] ksys_write+0x12a/0x250 [ 216.687247][T12243] ? __pfx_ksys_write+0x10/0x10 [ 216.687269][T12243] do_syscall_64+0x115/0x870 [ 216.687282][T12243] ? clear_bhb_loop+0x40/0x90 [ 216.687297][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.687309][T12243] RIP: 0033:0x7feaf835e7ce [ 216.687318][T12243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.687329][T12243] RSP: 002b:00007feaf921cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.687341][T12243] RAX: ffffffffffffffda RBX: 00007feaf921d6c0 RCX: 00007feaf835e7ce [ 216.687348][T12243] RDX: 0000000000000001 RSI: 00007feaf921d0a0 RDI: 0000000000000005 [ 216.687355][T12243] RBP: 00007feaf921d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.687361][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.687367][T12243] R13: 00007feaf8626038 R14: 00007feaf8625fa0 R15: 00007ffd444f8208 [ 216.687382][T12243] [ 216.736729][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 216.736744][ T42] audit: type=1400 audit(1785951256.384:1745): avc: denied { nlmsg_read } for pid=12244 comm="syz.7.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 216.769838][T12246] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 216.770278][ T42] audit: type=1400 audit(1785951256.414:1746): avc: denied { ioctl } for pid=12247 comm="syz.6.1444" path="socket:[50057]" dev="sockfs" ino=50057 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.781825][ T42] audit: type=1400 audit(1785951256.424:1747): avc: denied { mount } for pid=12244 comm="syz.7.1443" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 216.782172][T12246] mac80211_hwsim hwsim24 : renamed from wlan0 (while UP) [ 216.790233][ T42] audit: type=1400 audit(1785951256.424:1748): avc: denied { watch } for pid=12244 comm="syz.7.1443" path="/10/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 217.024558][T12258] scsi_dev_info_list_add_str: bad dev info string 'end' '' '' [ 217.028513][T12258] tmpfs: Unknown parameter 'grpuuota' [ 217.194639][ T34] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 217.249641][ T42] audit: type=1400 audit(1785951256.894:1749): avc: denied { unmount } for pid=7268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.340679][ T42] audit: type=1400 audit(1785951256.984:1750): avc: denied { write } for pid=12264 comm="syz.6.1449" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.358382][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.365971][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.368354][T12266] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 217.369843][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 217.376642][ T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.379698][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.386644][T12257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.394998][ T34] hub 7-1:1.0: bad descriptor, ignoring hub [ 217.397431][ T34] hub 7-1:1.0: probe with driver hub failed with error -5 [ 217.400343][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 217.402313][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 217.412830][ T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 217.414019][T12266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.417933][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 217.451445][T12263] bond2: (slave geneve2): making interface the new active one [ 217.455647][T12263] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 217.461695][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.468632][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.475960][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.479905][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.565135][ T42] audit: type=1400 audit(1785951257.214:1751): avc: denied { unmount } for pid=11966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.645170][ T5819] libceph: mon0 (1)[c::]:6789 socket error on write [ 217.675349][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1450'. [ 217.706208][ T1046] usb 7-1: USB disconnect, device number 29 [ 217.731325][ T42] audit: type=1400 audit(1785951257.374:1752): avc: denied { bind } for pid=12281 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.731479][T12282] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 217.747300][ T42] audit: type=1400 audit(1785951257.394:1753): avc: denied { write } for pid=12281 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.753908][ T42] audit: type=1400 audit(1785951257.394:1754): avc: denied { getopt } for pid=12281 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.924465][ T5847] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 217.954144][ T5092] Bluetooth: hci2: command tx timeout [ 218.031525][T12301] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 218.074165][ T5092] Bluetooth: hci4: command tx timeout [ 218.128084][T12308] trusted_key: encrypted_key: insufficient parameters specified [ 218.183682][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1462'. [ 218.396925][T12324] netlink: 'syz.4.1468': attribute type 62 has an invalid length. [ 218.407630][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1463'. [ 218.456586][T12273] ceph: No mds server is up or the cluster is laggy [ 218.632311][T12344] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1474'. [ 218.769178][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 218.861271][ T5092] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 218.864428][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 218.865835][ T5744] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 219.028747][T12366] netlink: 1712 bytes leftover after parsing attributes in process `syz.7.1479'. [ 219.038004][T12366] ipt_ECN: cannot use operation on non-tcp rule [ 219.073749][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1481'. [ 219.096644][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1482'. [ 219.100702][T12370] bond1: Invalid ad_actor_system MAC address. [ 219.103056][T12370] bond1: option ad_actor_system: invalid value (27571) [ 219.104042][T12374] binder: 12373:12374 ioctl c0306201 200000000040 returned -14 [ 219.110361][T12374] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 219.121929][T12370] bond1 (unregistering): Released all slaves [ 219.127537][T12375] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1481'. [ 219.167824][T12375] openvswitch: netlink: Key type 30 is not supported [ 219.271928][T12379] fuse: Bad value for 'rootmode' [ 219.365833][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1485'. [ 219.369834][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1485'. [ 219.374298][T12385] netlink: 'syz.7.1485': attribute type 19 has an invalid length. [ 219.392803][ T5891] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.396609][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 219.399751][ T5891] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.416235][ T5891] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.419032][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 219.420664][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 219.422652][ T5891] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.699790][T12402] trusted_key: syz.2.1489 sent an empty control message without MSG_MORE. [ 219.705653][ T1046] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 219.888810][ T1046] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 2.01 [ 219.892272][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.904320][ T1046] usb 9-1: config 0 descriptor?? [ 220.014715][ T1046] viperboard 9-1:0.0: version 0.00 found at bus 009 address 016 [ 220.035208][ T1046] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 220.041438][ T1046] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 220.138307][T12420] bond0: entered promiscuous mode [ 220.140548][T12420] bond_slave_0: entered promiscuous mode [ 220.143084][T12420] bond_slave_1: entered promiscuous mode [ 220.148235][T12420] batadv0: entered promiscuous mode [ 220.156853][T12420] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.157412][ T5744] Bluetooth: hci4: command tx timeout [ 220.166291][T12420] bond0: left promiscuous mode [ 220.168424][T12420] bond_slave_0: left promiscuous mode [ 220.170845][T12420] bond_slave_1: left promiscuous mode [ 220.177892][T12420] batadv0: left promiscuous mode [ 220.264906][ T4365] usb 9-1: USB disconnect, device number 16 [ 220.750828][T12451] NILFS (nullb0): couldn't find nilfs on the device [ 220.853479][T12465] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 221.078454][ T5092] Bluetooth: hci4: unexpected subevent 0x19 length: 30 > 28 [ 221.080546][ T5092] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 221.209696][T12476] lo speed is unknown, defaulting to 1000 [ 221.636540][T12495] syzkaller0: entered promiscuous mode [ 221.638883][T12495] syzkaller0: entered allmulticast mode [ 221.781179][T12509] program syz.4.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.785663][T12509] program syz.4.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.059196][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 222.059230][ T42] audit: type=1400 audit(1785951261.705:1787): avc: denied { ioctl } for pid=12523 comm="syz.2.1527" path="socket:[50562]" dev="sockfs" ino=50562 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.221146][T12527] selinux_netlink_send: 24 callbacks suppressed [ 222.221159][T12527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52499 sclass=netlink_route_socket pid=12527 comm=syz.7.1528 [ 222.236527][ T42] audit: type=1400 audit(1785951261.875:1788): avc: denied { ioctl } for pid=12526 comm="syz.7.1528" path="socket:[50576]" dev="sockfs" ino=50576 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.389263][ T42] audit: type=1400 audit(1785951262.035:1789): avc: denied { bind } for pid=12531 comm="syz.7.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.509092][ T5092] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 222.944040][ T5092] Bluetooth: hci4: command 0x0405 tx timeout [ 223.173779][ T1351] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 223.359771][ T1351] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 223.373998][ T1351] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 223.377484][ T1351] usb 12-1: Product: syz [ 223.378825][ T1351] usb 12-1: Manufacturer: syz [ 223.380326][ T1351] usb 12-1: SerialNumber: syz [ 223.386087][ T1351] usb 12-1: config 0 descriptor?? [ 223.389581][ T1351] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 223.392589][ T1351] dvb-usb: bulk message failed: -22 (2/0) [ 223.396177][ T1351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.399513][ T1351] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 223.402127][ T1351] usb 12-1: media controller created [ 223.408873][ T1351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.589502][T12544] cxusb: i2c rd: len=80 is too big! [ 223.589502][T12544] [ 223.743802][ T5092] Bluetooth: hci1: command 0x040f tx timeout [ 223.746209][ T5738] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 224.397580][T12545] __nla_validate_parse: 2 callbacks suppressed [ 224.397595][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1531'. [ 224.402962][T12545] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1531'. [ 224.406285][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1531'. [ 224.563089][ T42] audit: type=1400 audit(1785951264.205:1790): avc: denied { getopt } for pid=12557 comm="syz.4.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.570985][ T1351] cxusb: set interface failed [ 224.571307][T12559] Invalid source name [ 224.572708][ T1351] dvb-usb: bulk message failed: -22 (1/0) [ 224.574100][T12559] UBIFS error (pid: 12559): cannot open "/dev/sg0", error -22 [ 224.614348][ T1351] DVB: Unable to find symbol mt352_attach() [ 224.619465][ T1351] dvb-usb: bulk message failed: -22 (5/0) [ 224.621361][ T1351] zl10353_read_register: readreg error (reg=127, ret==-121) [ 224.626847][ T1351] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 224.655491][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.658617][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.658938][ T42] audit: type=1400 audit(1785951264.305:1791): avc: denied { write } for pid=12555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.669830][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.675082][ T1351] rc_core: IR keymap rc-dvico-mce not found [ 224.677118][ T1351] Registered IR keymap rc-empty [ 224.679978][ T1351] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 224.684568][ T1351] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input18 [ 224.690628][ T42] audit: type=1400 audit(1785951264.335:1792): avc: denied { read } for pid=5129 comm="acpid" name="event4" dev="devtmpfs" ino=3608 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.691215][ T1351] dvb-usb: schedule remote query interval to 100 msecs. [ 224.701237][ T1351] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 224.713084][ T42] audit: type=1400 audit(1785951264.335:1793): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3608 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.715589][ T1351] usb 12-1: USB disconnect, device number 2 [ 224.732804][ T42] audit: type=1400 audit(1785951264.335:1794): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3608 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.749559][ T42] audit: type=1400 audit(1785951264.395:1795): avc: denied { write } for pid=12570 comm="syz.2.1539" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.773823][ T42] audit: type=1400 audit(1785951264.415:1796): avc: denied { write } for pid=12572 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.800756][ T1351] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 225.956256][T12625] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.002514][T12627] HELLO WORLD FROM SYZ [ 226.050386][T12630] binder: 12629:12630 ioctl c0306201 200000000680 returned -14 [ 226.094128][T12633] netlink: 'syz.2.1548': attribute type 13 has an invalid length. [ 226.467743][T12664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12664 comm=syz.2.1561 [ 226.918473][T12690] 9pnet_virtio: no channels available for device syz [ 226.978994][T12690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1571'. [ 226.982047][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 227.047899][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1570'. [ 227.073969][ T5092] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 227.208702][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 227.208735][ T42] audit: type=1400 audit(1785951266.855:1830): avc: denied { read append } for pid=12704 comm="syz.2.1577" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.220735][ T42] audit: type=1400 audit(1785951266.855:1831): avc: denied { open } for pid=12704 comm="syz.2.1577" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.278567][T12705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.280700][ T5738] Bluetooth: hci2: Opcode 0x206a failed: -112 [ 227.288441][T12705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.290595][T12705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.312548][T12705] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.315037][ T42] audit: type=1400 audit(1785951266.955:1832): avc: denied { compute_member } for pid=12712 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.315473][ T42] audit: type=1400 audit(1785951266.965:1833): avc: denied { write } for pid=12712 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.340673][T12705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.345867][T12705] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 227.384055][T12705] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 227.458700][T12720] fuse: Unknown parameter '{fdǘ]أ]xͱwMBl?-{bd?Xq\?.MfxxM.sCkц' [ 227.463155][ T42] audit: type=1400 audit(1785951267.105:1834): avc: denied { ioctl } for pid=12704 comm="syz.2.1577" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.473172][ T42] audit: type=1400 audit(1785951267.105:1835): avc: denied { read } for pid=12719 comm="syz.6.1580" path="socket:[51837]" dev="sockfs" ino=51837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.553334][ T42] audit: type=1400 audit(1785951267.195:1836): avc: denied { setopt } for pid=12721 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.561239][ T42] audit: type=1400 audit(1785951267.195:1837): avc: denied { connect } for pid=12721 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.683753][T12734] block2mtd: illegal erase size [ 227.689752][ T42] audit: type=1400 audit(1785951267.335:1838): avc: denied { write } for pid=12731 comm="syz.2.1584" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.792678][ T5092] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 227.801567][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 227.921034][ T1046] IPVS: starting estimator thread 0... [ 228.046547][T12753] IPVS: using max 26 ests per chain, 62400 per kthread [ 228.253535][ T42] audit: type=1400 audit(1785951267.895:1839): avc: denied { write } for pid=12764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.268547][T12768] tipc: Started in network mode [ 228.271077][T12768] tipc: Node identity ac14140f, cluster identity 4711 [ 228.275449][T12768] tipc: New replicast peer: 172.30.0.7 [ 228.277936][T12768] tipc: Enabled bearer , priority 10 [ 228.284105][ T7423] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 228.285748][T12773] coredump: 142(syz.7.1594): Core dump to core aborted: cannot preserve file permissions [ 228.422120][T12779] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 228.442619][ T7423] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.448450][T12779] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 228.449346][ T7423] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.456576][ T7423] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.460153][ T7423] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.552782][T12756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.573966][ T7613] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 228.577788][ T7423] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.729304][ T7613] usb 11-1: Using ep0 maxpacket: 32 [ 228.749852][ T7613] usb 11-1: config index 0 descriptor too short (expected 15270, got 18) [ 228.760284][ T7613] usb 11-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 228.768452][ T7613] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.774399][ T7613] usb 11-1: Product: syz [ 228.776072][ T7613] usb 11-1: Manufacturer: syz [ 228.784808][ T7613] usb 11-1: SerialNumber: syz [ 228.791788][ T7613] usb 11-1: config 0 descriptor?? [ 228.804858][ T7613] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 228.808388][ T7613] dvb-usb: bulk message failed: -22 (4/0) [ 228.810785][ T7613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 228.815552][ T7613] dvb-usb: bulk message failed: -22 (5/0) [ 228.817818][ T7613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 228.826176][ T7613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.830928][ T7613] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 228.831571][ T1046] usb 9-1: USB disconnect, device number 17 [ 228.836456][ T7613] usb 11-1: media controller created [ 228.862746][ T7613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.867092][ T5092] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 228.880422][ T7613] usb 11-1: selecting invalid altsetting 3 [ 228.882728][ T7613] ttusb2: set interface to alts=3 failed [ 228.909051][ T7613] DVB: Unable to find symbol tda10086_attach() [ 228.910916][ T7613] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 228.916511][ T7613] dvb-usb: bulk message failed: -22 (4/0) [ 228.918353][ T7613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 228.921377][ T7613] dvb-usb: bulk message failed: -22 (5/0) [ 228.923075][ T7613] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 228.926479][ T7613] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 229.075123][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.080920][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.130457][T12800] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 229.130457][T12800] Please contact the netfilter-devel mailing list or update your nftables rules. [ 229.199133][ T7423] usb 11-1: USB disconnect, device number 2 [ 229.228003][T12803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.240891][ T7423] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 229.354756][ T5092] Bluetooth: hci4: command 0x0405 tx timeout [ 229.354818][ T5738] Bluetooth: hci2: command 0x206a tx timeout [ 229.357146][ T5092] Bluetooth: hci1: command 0x040f tx timeout [ 229.393525][ T7613] tipc: Node number set to 2886997007 [ 229.608770][T12818] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 229.652190][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1607'. [ 229.673173][T12820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.698034][T12820] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 229.783791][T12828] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.850377][ T5738] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 229.878961][T12833] xt_hashlimit: size too large, truncated to 1048576 [ 229.944975][T12835] syzkaller0: entered promiscuous mode [ 229.947117][T12835] syzkaller0: entered allmulticast mode [ 230.433567][ T7613] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 230.584782][ T7613] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.588559][ T7613] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.591555][ T7613] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.594474][ T7613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.600439][T12850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.608979][ T7613] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.809290][ T5738] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 230.820258][ T7423] usb 7-1: USB disconnect, device number 30 [ 230.932576][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'. [ 230.938420][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1623'. [ 230.981938][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1624'. [ 231.204068][T12887] netlink: 'syz.4.1629': attribute type 10 has an invalid length. [ 231.212482][T12887] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 231.228695][T12887] dvmrp0: entered allmulticast mode [ 231.423595][ T5738] Bluetooth: hci4: command 0x0405 tx timeout [ 231.424049][ T5744] Bluetooth: hci2: command 0x206a tx timeout [ 231.437887][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 231.443772][T12894] netlink: 'syz.2.1632': attribute type 26 has an invalid length. [ 231.446847][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 231.451775][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 231.455054][T12894] netlink: 'syz.2.1632': attribute type 26 has an invalid length. [ 231.457494][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 231.756577][T12918] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.759076][T12918] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 231.761605][T12919] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.764428][T12919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 231.863507][T12924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 232.053522][ T5892] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 232.097234][T12935] random: crng reseeded on system resumption [ 232.205645][ T5892] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.209411][ T5892] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.213223][ T5892] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.216785][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.229538][ T5744] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 232.231603][T12922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.243254][ T5892] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.443114][ T5744] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 232.460578][ T5892] usb 7-1: USB disconnect, device number 31 [ 233.102209][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 233.102234][ T42] audit: type=1400 audit(1785951272.745:1854): avc: denied { ioctl } for pid=12966 comm="syz.2.1652" path="socket:[55354]" dev="sockfs" ino=55354 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.503434][ T5744] Bluetooth: hci2: command 0x206a tx timeout [ 233.503442][ T5738] Bluetooth: hci4: command 0x0405 tx timeout [ 233.648578][ T42] audit: type=1400 audit(1785951273.295:1855): avc: denied { create } for pid=12983 comm="syz.6.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 233.675858][ T42] audit: type=1400 audit(1785951273.325:1856): avc: denied { name_connect } for pid=12986 comm="syz.4.1660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 233.897535][ T42] audit: type=1400 audit(1785951273.545:1857): avc: denied { mount } for pid=12997 comm="syz.6.1663" name="/" dev="rpc_pipefs" ino=53830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 233.918160][ T42] audit: type=1400 audit(1785951273.565:1858): avc: denied { unmount } for pid=11881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 233.933839][ T5839] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 234.062004][ T42] audit: type=1400 audit(1785951273.705:1859): avc: denied { read } for pid=13007 comm="syz.2.1667" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.069208][ T42] audit: type=1400 audit(1785951273.705:1860): avc: denied { open } for pid=13007 comm="syz.2.1667" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.086212][ T5839] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.089682][ T5839] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.092677][ T5839] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.095764][ T5839] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.100410][T12990] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 234.106133][ T5839] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.114267][ T42] audit: type=1400 audit(1785951273.765:1861): avc: denied { read } for pid=13007 comm="syz.2.1667" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 234.126566][ T42] audit: type=1400 audit(1785951273.765:1862): avc: denied { open } for pid=13007 comm="syz.2.1667" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 234.142282][ T42] audit: type=1400 audit(1785951273.765:1863): avc: denied { lock } for pid=13007 comm="syz.2.1667" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 234.255142][T13011] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 234.257769][T13011] overlayfs: overlapping lowerdir path [ 234.310611][ T5738] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 234.328639][ T5738] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 234.333675][ T5839] usb 12-1: USB disconnect, device number 3 [ 234.373715][ T5104] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 234.523291][ T5104] usb 11-1: device descriptor read/64, error -71 [ 234.554063][T13017] usb usb8: usbfs: process 13017 (syz.4.1671) did not claim interface 0 before use [ 234.723727][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 234.730129][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 234.735602][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 234.773953][ T5104] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 234.918883][ T5104] usb 11-1: device descriptor read/64, error -71 [ 235.025726][T13049] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 235.059210][ T5104] usb usb11-port1: attempt power cycle [ 235.075180][T13053] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 235.443298][ T5892] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 235.459661][ T5104] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 235.509618][ T5104] usb 11-1: device descriptor read/8, error -71 [ 235.598923][ T5892] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 235.604792][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.607934][ T5892] usb 7-1: Product: syz [ 235.609782][ T5892] usb 7-1: Manufacturer: syz [ 235.611281][ T5892] usb 7-1: SerialNumber: syz [ 235.743314][ T5104] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 235.763833][ T5104] usb 11-1: device descriptor read/8, error -71 [ 235.853485][ T1046] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 235.873985][ T5104] usb usb11-port1: unable to enumerate USB device [ 236.005725][ T1046] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.009274][ T1046] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.012540][ T1046] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.015492][ T1046] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.020895][T13071] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 236.026646][ T1046] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.027619][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.033803][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.094989][ T5892] rtl8150 7-1:1.0: couldn't reset the device [ 236.097152][ T5892] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 236.111005][ T5892] usb 7-1: USB disconnect, device number 32 [ 236.213579][ T34] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 236.234002][ T5738] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 236.245759][ T1046] usb 12-1: USB disconnect, device number 4 [ 236.366047][ T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 236.370154][ T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 236.374027][ T34] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 236.377762][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.385349][T13078] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 236.388360][T13078] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 236.393606][ T34] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 236.402181][ T34] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 236.727346][ T4365] usb 9-1: USB disconnect, device number 18 [ 236.736233][ T4365] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 236.752320][ T4365] cyberjack 9-1:1.0: device disconnected [ 236.996416][T13094] devtmpfs: Cannot change global quota limit on remount [ 237.006567][T13094] dummy_hcd dummy_hcd.0: remove, state 1 [ 237.016085][T13094] usb usb5: USB disconnect, device number 1 [ 237.019713][T13094] usb 5-1: USB disconnect, device number 7 [ 237.030234][T13094] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 237.119407][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 237.406272][T13116] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 237.410811][T13116] SELinux: failed to load policy [ 237.418189][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 237.565697][T13094] dummy_hcd dummy_hcd.0: stopped [ 237.574041][T13094] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 237.804240][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'. [ 237.808198][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'. [ 237.833278][ T5847] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 237.852122][T13145] netlink: 'syz.7.1709': attribute type 1 has an invalid length. [ 237.886797][T13145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.952402][T13145] bond2: (slave veth3): Enslaving as an active interface with a down link [ 237.976146][T13145] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 237.995734][ T5847] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.000332][ T5847] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.008608][ T5847] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.014071][ T5847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.022524][T13125] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.026615][ T5847] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.084256][T13161] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 238.092875][T13161] SELinux: failed to load policy [ 238.104628][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 238.134690][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 238.134736][ T42] audit: type=1400 audit(1785951277.785:1890): avc: denied { write } for pid=13166 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.200966][ T42] audit: type=1400 audit(1785951277.845:1891): avc: denied { write } for pid=13168 comm="syz.7.1713" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.233360][ T42] audit: type=1400 audit(1785951277.865:1892): avc: denied { map } for pid=13168 comm="syz.7.1713" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.246220][ T42] audit: type=1400 audit(1785951277.865:1893): avc: denied { read write } for pid=13170 comm="syz.2.1714" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.251285][ T5744] Bluetooth: hci2: unexpected subevent 0x1a length: 30 > 6 [ 238.256923][ T42] audit: type=1400 audit(1785951277.865:1894): avc: denied { open } for pid=13170 comm="syz.2.1714" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.274027][ T42] audit: type=1400 audit(1785951277.865:1895): avc: denied { ioctl } for pid=13170 comm="syz.2.1714" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.286491][ T42] audit: type=1400 audit(1785951277.905:1896): avc: denied { lock } for pid=13168 comm="syz.7.1713" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.301195][ T5847] usb 11-1: USB disconnect, device number 7 [ 238.312420][ T42] audit: type=1400 audit(1785951277.905:1897): avc: denied { write } for pid=13171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.380506][ T42] audit: type=1400 audit(1785951278.025:1898): avc: denied { write } for pid=13184 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.387871][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1719'. [ 238.392730][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1719'. [ 238.441153][ T42] audit: type=1400 audit(1785951278.085:1899): avc: denied { write } for pid=13189 comm="syz.4.1720" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.471519][ T1351] IPVS: starting estimator thread 0... [ 238.474422][T13193] tipc: Can't bind to reserved service type 2 [ 238.563790][T13194] IPVS: using max 44 ests per chain, 105600 per kthread [ 238.580331][T13200] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1719'. [ 238.623478][ T5738] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 238.626770][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 239.282763][T13216] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 239.288128][T13216] SELinux: failed to load policy [ 239.303207][ T5738] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 239.703237][ T1351] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 239.706526][T13250] tun0: tun_chr_ioctl cmd 1074025675 [ 239.708672][T13250] tun0: persist enabled [ 239.710720][T13250] tun0: tun_chr_ioctl cmd 1074025675 [ 239.712900][T13250] tun0: persist enabled [ 239.718410][T13250] 9p: Unknown access argument 18446744073709551615: -34 [ 239.763431][ T7613] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 239.875091][ T1351] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.878919][ T1351] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.881854][ T1351] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.884606][ T1351] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.889084][T13233] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 239.898199][ T1351] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.914877][ T7613] usb 9-1: Using ep0 maxpacket: 8 [ 239.919433][ T7613] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.923370][ T7613] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.930293][ T7613] usb 9-1: config 0 interface 0 has no altsetting 0 [ 239.932187][ T7613] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.939090][ T7613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.957459][T13260] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 239.961901][T13260] SELinux: failed to load policy [ 239.964718][ T7613] usb 9-1: config 0 descriptor?? [ 239.980023][T13260] __nla_validate_parse: 2 callbacks suppressed [ 239.980036][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1737'. [ 240.104831][ T5738] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 240.122375][ T34] usb 12-1: USB disconnect, device number 5 [ 240.385151][ T7613] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 240.387526][ T7613] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 240.389688][ T7613] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 240.391832][ T7613] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 240.393941][ T7613] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 240.397171][ T7613] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 240.591037][T13242] overlayfs: overlapping lowerdir path [ 240.600826][ T4365] usb 9-1: USB disconnect, device number 19 [ 240.667550][T13267] misc userio: Invalid payload size [ 240.811917][T13273] netlink: 'syz.7.1741': attribute type 11 has an invalid length. [ 240.817278][T13273] syz_tun: entered allmulticast mode [ 240.820317][T13273] openvswitch: netlink: Missing key (keys=40, expected=100) [ 240.823809][T13272] syz_tun: left allmulticast mode [ 241.006184][T13282] bad cache= option: none [ 241.006184][T13282] [ 241.008629][T13282] CIFS: VFS: bad cache= option: none [ 241.202527][T13289] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 241.222686][T13289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.274193][T13289] bond3: (slave veth3): Enslaving as an active interface with a down link [ 241.304740][T13289] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 243.263186][T13287] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 243.263255][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 244.068798][T13287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.075772][T13287] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.136617][T13324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1757'. [ 244.138115][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1759'. [ 244.143124][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1759'. [ 244.168606][T13323] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 244.222179][T13323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.240774][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 244.240792][ T42] audit: type=1400 audit(1785951283.885:1922): avc: denied { write } for pid=13330 comm="syz.6.1762" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.294720][T13333] bond1: (slave veth3): Enslaving as an active interface with a down link [ 244.308673][T13323] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 244.488549][ T7613] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 244.683303][ T7613] usb 12-1: Using ep0 maxpacket: 8 [ 244.688186][ T7613] usb 12-1: config 0 has an invalid interface number: 143 but max is 0 [ 244.690874][ T7613] usb 12-1: config 0 has no interface number 0 [ 244.692831][ T7613] usb 12-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 244.696166][ T7613] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.700738][ T7613] usb 12-1: config 0 descriptor?? [ 244.824738][ T7613] viperboard 12-1:0.143: version 0.00 found at bus 012 address 006 [ 244.846597][ T7613] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 244.851371][ T7613] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 244.912512][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.919058][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.920322][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.922627][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.932328][ T42] audit: type=1400 audit(1785951284.575:1923): avc: denied { setopt } for pid=13327 comm="syz.7.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 244.941788][ T42] audit: type=1400 audit(1785951284.575:1924): avc: denied { bind } for pid=13327 comm="syz.7.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 244.964936][T13328] loop5: detected capacity change from 0 to 7 [ 244.973649][ T7423] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 244.974090][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 244.979643][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.985700][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 244.989372][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.992604][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 244.996397][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.002482][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.005779][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.008950][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.011848][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.015021][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.018015][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.020549][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.023764][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.026169][T13328] ldm_validate_partition_table(): Disk read failed. [ 245.029392][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.033351][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.037210][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.040157][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.047160][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.050120][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.052763][T13328] Dev loop5: unable to read RDB block 0 [ 245.056080][T13328] loop5: unable to read partition table [ 245.063737][T13328] loop5: partition table beyond EOD, truncated [ 245.066337][T13328] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 245.073096][ T5104] usb 12-1: USB disconnect, device number 6 [ 245.135298][ T7423] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.139264][ T7423] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.143277][ T7423] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.146477][ T7423] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.151961][T13346] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.157995][ T7423] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.160699][T13350] /dev/sg0: Can't lookup blockdev [ 245.233385][ T42] audit: type=1400 audit(1785951284.875:1925): avc: denied { mounton } for pid=13349 comm="syz.4.1767" path="/proc/1060/task" dev="proc" ino=56739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.350420][ T5738] Bluetooth: hci2: command 0x206a tx timeout [ 245.379514][ T7423] usb 7-1: USB disconnect, device number 33 [ 245.438536][ T42] audit: type=1400 audit(1785951285.085:1926): avc: denied { map } for pid=13349 comm="syz.4.1767" path="socket:[56738]" dev="sockfs" ino=56738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.446668][ T42] audit: type=1400 audit(1785951285.085:1927): avc: denied { read } for pid=13349 comm="syz.4.1767" path="socket:[56738]" dev="sockfs" ino=56738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.460744][ T42] audit: type=1400 audit(1785951285.105:1928): avc: denied { associate } for pid=13358 comm="syz.4.1767" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 245.648590][ T42] audit: type=1400 audit(1785951285.295:1929): avc: denied { execute } for pid=13366 comm="syz.7.1770" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.689673][ T42] audit: type=1400 audit(1785951285.335:1930): avc: denied { listen } for pid=13366 comm="syz.7.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.698609][ T42] audit: type=1400 audit(1785951285.335:1931): avc: denied { accept } for pid=13366 comm="syz.7.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.003466][T13381] netlink: 'syz.2.1775': attribute type 5 has an invalid length. [ 246.006661][T13381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'. [ 246.153265][ T5744] Bluetooth: hci4: command 0x0405 tx timeout [ 246.302600][T13393] xt_hashlimit: invalid interval [ 246.836108][T13411] netlink: 'syz.6.1785': attribute type 21 has an invalid length. [ 246.838786][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1785'. [ 246.846713][ T5604] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.850070][T13411] netlink: 'syz.6.1785': attribute type 21 has an invalid length. [ 246.852676][ T5604] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.855608][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1785'. [ 246.858842][ T5604] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.861825][ T5604] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.053373][ T5892] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 247.191893][T13427] syzkaller0: entered promiscuous mode [ 247.195965][T13427] syzkaller0: entered allmulticast mode [ 247.207114][ T5892] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.211196][ T5892] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.215891][ T5892] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.218770][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.225364][T13409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.230968][ T5892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.348033][T13429] syz.7.1790(13429): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 247.433313][ T5738] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 247.436914][ T5744] Bluetooth: hci1: command 0x040f tx timeout [ 247.449722][T13392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.451222][ T5104] usb 9-1: USB disconnect, device number 20 [ 247.452428][T13392] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 247.475906][T13392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.477851][T13392] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 247.485763][T13392] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.491668][T13392] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 247.731854][T13443] bpf: Bad value for 'uid' [ 247.770858][T13446] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 247.816389][ T5847] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 247.970189][T13453] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 247.984305][ T5627] e1000 0000:00:06.0 eth0: Reset adapter [ 247.991584][ T5847] usb 12-1: Using ep0 maxpacket: 32 [ 248.004753][ T5847] usb 12-1: unable to get BOS descriptor or descriptor too short [ 248.011554][ T5847] usb 12-1: string descriptor 0 read error: -22 [ 248.014208][ T5847] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 248.023043][ T5847] usb 12-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 248.033482][ T5847] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 248.038111][ T5847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 248.039953][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 248.050628][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.053856][ T5847] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 248.056370][ T5847] usb 12-1: media controller created [ 248.057956][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.059751][ T5847] dw2102: i2c transfer failed. [ 248.061191][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.063202][ T5847] dw2102: i2c transfer failed. [ 248.064718][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.066541][ T5847] dw2102: i2c transfer failed. [ 248.068049][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.069851][ T5847] dw2102: i2c transfer failed. [ 248.071362][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.075140][ T5847] dw2102: i2c transfer failed. [ 248.076718][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 248.078479][ T5847] dw2102: i2c transfer failed. [ 248.079962][ T5847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 248.086746][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.103389][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 248.107509][ T5847] dw2102: command 0x0e transfer failed. [ 248.109482][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 248.112591][ T5847] dw2102: command 0x0e transfer failed. [ 248.433055][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 248.437520][ T5847] dw2102: command 0x0e transfer failed. [ 248.441895][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 248.447280][ T4365] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 248.450661][ T5847] dw2102: command 0x0e transfer failed. [ 248.455026][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 248.461226][ T5847] dw2102: command 0x51 transfer failed. [ 248.496941][ T5847] DVB: Unable to find symbol ds3000_attach() [ 248.499511][ T5847] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 248.553357][ T5847] rc_core: IR keymap rc-su3000 not found [ 248.556961][ T5847] Registered IR keymap rc-empty [ 248.565153][ T5847] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 248.579829][ T5847] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input24 [ 248.628008][ T5847] dvb-usb: schedule remote query interval to 150 msecs. [ 248.631125][ T5847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 248.633927][ T5847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 248.784542][ T4365] dvb-usb: bulk message failed: -22 (1/0) [ 248.803073][ T4365] dw2102: i2c transfer failed. [ 249.005034][ T4365] dvb-usb: bulk message failed: -22 (1/0) [ 249.006957][ T4365] dw2102: i2c transfer failed. [ 249.243136][ T4365] dvb-usb: bulk message failed: -22 (1/0) [ 249.245059][ T4365] dw2102: i2c transfer failed. [ 249.403127][ T4365] dvb-usb: bulk message failed: -22 (1/0) [ 249.405681][ T4365] dw2102: i2c transfer failed. [ 249.563080][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 249.565610][ T5847] dw2102: i2c transfer failed. [ 249.733036][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 249.734939][ T5847] dw2102: i2c transfer failed. [ 249.893005][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 249.894891][ T5847] dw2102: i2c transfer failed. [ 250.063200][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.071243][ T5847] dw2102: i2c transfer failed. [ 250.239196][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.241178][ T5847] dw2102: i2c transfer failed. [ 250.433185][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.435139][ T5847] dw2102: i2c transfer failed. [ 250.593058][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.594925][ T5847] dw2102: i2c transfer failed. [ 250.753579][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.755559][ T5847] dw2102: i2c transfer failed. [ 250.913066][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 250.915820][ T5847] dw2102: i2c transfer failed. [ 251.018695][T13453] e1000e 0000:00:02.0 eth1: Hardware Error [ 251.073093][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 251.075583][ T5847] dw2102: i2c transfer failed. [ 251.190681][T13453] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 251.238632][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 251.244429][ T5847] dw2102: i2c transfer failed. [ 251.382495][T13435] erspan0: entered promiscuous mode [ 251.384828][T13435] erspan0: entered allmulticast mode [ 251.394764][T13477] ip6tnl0: Caught tx_queue_len zero misconfig [ 251.395727][ T5627] e1000 0000:00:06.0 eth0: Reset adapter [ 251.406174][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 251.412683][ T5847] dw2102: i2c transfer failed. [ 251.429759][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 251.429776][ T42] audit: type=1400 audit(1785951291.076:1942): avc: denied { bind } for pid=13495 comm="syz.4.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.442406][ T42] audit: type=1400 audit(1785951291.076:1943): avc: denied { write } for pid=13493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.513904][ T42] audit: type=1400 audit(1785951291.146:1944): avc: denied { write } for pid=13501 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.533109][ T42] audit: type=1400 audit(1785951291.156:1945): avc: denied { bind } for pid=13502 comm="syz.2.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.666105][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 251.667903][ T5847] dw2102: i2c transfer failed. [ 251.880764][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 251.903009][ T5892] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 251.907492][ T5847] dw2102: i2c transfer failed. [ 252.064942][ T5892] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.069783][ T5892] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.074313][ T5892] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.078149][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.084930][ T4365] e1000 0000:00:06.0 eth0: Reset adapter [ 252.088285][T13517] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.092782][ T5892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.106838][ T5627] dvb-usb: bulk message failed: -22 (1/0) [ 252.108684][ T5627] dw2102: i2c transfer failed. [ 252.241852][ T42] audit: type=1400 audit(1785951291.886:1946): avc: denied { write } for pid=13518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.281073][T13523] openvswitch: netlink: Missing key (keys=40, expected=100) [ 252.298447][ T5819] usb 12-1: USB disconnect, device number 7 [ 252.304001][ T42] audit: type=1400 audit(1785951291.956:1947): avc: denied { write } for pid=13524 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.348151][ T7423] usb 9-1: USB disconnect, device number 21 [ 252.403704][ T5819] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 252.444536][ T42] audit: type=1400 audit(1785951292.096:1948): avc: denied { write } for pid=13530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.503756][ T42] audit: type=1400 audit(1785951292.156:1949): avc: denied { write } for pid=13534 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.844160][ T42] audit: type=1400 audit(1785951292.496:1950): avc: denied { write } for pid=13536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.909901][ T42] audit: type=1400 audit(1785951292.556:1951): avc: denied { write } for pid=13539 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.798765][ T4365] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 255.508694][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511045][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.516819][ T1443] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 255.521286][ T1443] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 255.524314][ T1443] CPU: 3 UID: 0 PID: 1443 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.527742][ T1443] Tainted: [L]=SOFTLOCKUP [ 255.529388][ T1443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.533371][ T1443] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 255.535356][ T1443] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 255.541811][ T1443] RSP: 0000:ffffc90006cff868 EFLAGS: 00010206 [ 255.544209][ T1443] RAX: dffffc0000000000 RBX: ffff8880267ec410 RCX: ffffffff87d1359f [ 255.547363][ T1443] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 255.550588][ T1443] RBP: ffff88802d4fc0e0 R08: 0000000000000005 R09: 0000000000000005 [ 255.553467][ T1443] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802d4fcc00 [ 255.555940][ T1443] R13: ffff8880267ec400 R14: ffff88802d4fc0d8 R15: 0000000000000000 [ 255.558397][ T1443] FS: 0000000000000000(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 255.561152][ T1443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.563149][ T1443] CR2: 00007fcc0e94f500 CR3: 0000000049e38000 CR4: 0000000000352ef0 [ 255.565638][ T1443] Call Trace: [ 255.566752][ T1443] [ 255.567694][ T1443] ? find_held_lock+0x2b/0x80 [ 255.569234][ T1443] usb_ep_queue+0xfa/0x3c0 [ 255.570702][ T1443] eth_start_xmit+0x684/0x1390 [ 255.572231][ T1443] dev_hard_start_xmit+0x121/0x760 [ 255.573866][ T1443] sch_direct_xmit+0x1b2/0xc70 [ 255.575358][ T1443] ? lock_acquire+0x1b9/0x370 [ 255.576842][ T1443] ? __pfx_sch_direct_xmit+0x10/0x10 [ 255.578488][ T1443] ? do_raw_spin_lock+0x200/0x260 [ 255.580091][ T1443] __dev_queue_xmit+0x27ac/0x4970 [ 255.581692][ T1443] ? rcu_is_watching+0x12/0xc0 [ 255.583198][ T1443] ? lockdep_hardirqs_on+0x78/0x100 [ 255.584927][ T1443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 255.586580][ T1443] ? __lock_acquire+0x49f/0x1a40 [ 255.588122][ T1443] ? ref_tracker_free+0x37e/0x6c0 [ 255.589736][ T1443] ? do_raw_spin_lock+0x128/0x260 [ 255.591322][ T1443] ? find_held_lock+0x2b/0x80 [ 255.592808][ T1443] ? skb_dequeue+0x126/0x180 [ 255.594257][ T1443] ? skb_dequeue+0x126/0x180 [ 255.595708][ T1443] ? find_held_lock+0x2b/0x80 [ 255.597261][ T1443] ? tx+0xa4/0x130 [ 255.598452][ T1443] ? rcu_is_watching+0x12/0xc0 [ 255.599969][ T1443] ? __pfx_tx+0x10/0x10 [ 255.601296][ T1443] tx+0xc4/0x130 [ 255.602434][ T1443] kthread+0x1d8/0x3c0 [ 255.603720][ T1443] ? __kthread_parkme+0xbb/0x230 [ 255.605301][ T1443] ? __pfx_kthread+0x10/0x10 [ 255.606763][ T1443] ? rcu_is_watching+0x12/0xc0 [ 255.608308][ T1443] ? __pfx_default_wake_function+0x10/0x10 [ 255.610206][ T1443] ? __kthread_parkme+0x18c/0x230 [ 255.611795][ T1443] ? kthread+0x13a/0x450 [ 255.613137][ T1443] ? __pfx_kthread+0x10/0x10 [ 255.614618][ T1443] kthread+0x370/0x450 [ 255.615943][ T1443] ? __pfx_kthread+0x10/0x10 [ 255.617414][ T1443] ret_from_fork+0x72b/0xd50 [ 255.618949][ T1443] ? __pfx_ret_from_fork+0x10/0x10 [ 255.620579][ T1443] ? __switch_to+0x800/0x10f0 [ 255.622048][ T1443] ? __pfx_kthread+0x10/0x10 [ 255.623447][ T1443] ret_from_fork_asm+0x1a/0x30 [ 255.624991][ T1443] [ 255.625986][ T1443] Modules linked in: [ 255.627347][ T1443] ---[ end trace 0000000000000000 ]--- [ 255.629057][ T1443] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 255.630740][ T1443] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 255.636635][ T1443] RSP: 0000:ffffc90006cff868 EFLAGS: 00010206 [ 255.638546][ T1443] RAX: dffffc0000000000 RBX: ffff8880267ec410 RCX: ffffffff87d1359f [ 255.641043][ T1443] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 255.643602][ T1443] RBP: ffff88802d4fc0e0 R08: 0000000000000005 R09: 0000000000000005 [ 255.646110][ T1443] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802d4fcc00 [ 255.648570][ T1443] R13: ffff8880267ec400 R14: ffff88802d4fc0d8 R15: 0000000000000000 [ 255.651056][ T1443] FS: 0000000000000000(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 255.653964][ T1443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.656468][ T1443] CR2: 00007fcc0e94f500 CR3: 000000000e994000 CR4: 0000000000352ef0 [ 255.659508][ T1443] Kernel panic - not syncing: Fatal exception in interrupt [ 255.663019][ T1443] Kernel Offset: disabled [ 255.664715][ T1443] Rebooting in 86400 seconds..