last executing test programs: 3m45.59712842s ago: executing program 32 (id=585): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) read$FUSE(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x24) ioctl$BLKTRACESETUP(r2, 0x6801, 0x0) 3m9.798211149s ago: executing program 1 (id=1144): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x81, 0xfffffffb, 0x3}) r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x0, {0xffffffff, 0xffffffff, 0x10007426, 0x8ab1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000003c0)={{0x8, 0x1, 0x100, 0x92e, 'syz0\x00', 0xf0}, 0x1, [0xffffffffffffff81, 0x8, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x8000000000000001, 0x46, 0x4b25, 0x5, 0x4, 0xffffffffffff77db, 0x1, 0x49e2, 0x9, 0x1, 0x1, 0x1f61, 0x10, 0x6, 0x8000000000000001, 0x2, 0x6, 0x101, 0x12, 0x1000, 0x8, 0x8, 0x6, 0x4, 0x7, 0x3, 0x7fffffff, 0x9, 0x6, 0x4d, 0x592, 0x5, 0x7, 0x3, 0x26, 0x2, 0x7, 0x9, 0x0, 0x10001, 0x80000000, 0x7, 0xf, 0x6, 0x5, 0x2, 0x8, 0x9, 0x4, 0x0, 0x0, 0x1ff, 0xe, 0x8, 0x4, 0x2, 0x242000000000, 0x8, 0x1, 0x56, 0x6, 0x9, 0x5, 0x7, 0x9, 0x8012, 0x7, 0xe5f9, 0xe, 0xffffffff80000000, 0x4, 0x2, 0x3, 0x100000003, 0x3, 0x8, 0x8, 0x471a, 0x0, 0x2, 0x6007, 0x6703, 0x8, 0x800, 0x6, 0x1, 0x3ff, 0x3, 0x5, 0x8, 0xfae, 0x10, 0x9, 0xab8, 0xffffffffffffffb5, 0x4, 0x7, 0x3, 0x0, 0x8, 0xc, 0xffffffffffff036a, 0xa, 0xd, 0x0, 0x4040000000, 0x8000, 0x4a10, 0x2, 0x7fff, 0x5ba, 0x6, 0x8000000000000001, 0x400000000000, 0xffffffffffff1d34, 0xc, 0x3c7, 0x5, 0x7, 0x2]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x84000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) 3m9.658767381s ago: executing program 1 (id=1147): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=8000,nqn=n', 0x31) (fail_nth: 26) 3m9.417144559s ago: executing program 1 (id=1150): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000540)=0x5, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'team0\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, "d84d28"}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) (fail_nth: 2) 3m9.349628237s ago: executing program 1 (id=1152): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x547043, 0x5a) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) 3m9.259479992s ago: executing program 1 (id=1154): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0xc62, 0x40, 0x42, 0x1}, 0x50) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r2, 0x6801, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x365d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @exit, @call={0x85, 0x0, 0x0, 0x2f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x8, 0x4a, &(0x7f0000000440)=""/74, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r1], &(0x7f0000000540)=[{0x0, 0x1, 0xd, 0x6}, {0x1, 0x2, 0x1, 0x3}, {0x5, 0x4, 0xd, 0x2}], 0x10, 0x7}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000008c0)={r2, r3}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000000), 0x0}, 0x20) r4 = socket(0x2, 0x805, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) 3m8.009179207s ago: executing program 1 (id=1159): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) umount2(0x0, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3m7.707185775s ago: executing program 33 (id=1159): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) umount2(0x0, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 2m4.857053033s ago: executing program 4 (id=1835): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f00000000c0), 0x4) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000400)="1c0000011a009b83a16cb9e13a8bf2ae0fc73f8a11000000dd1dab60b49aa70d6e9acaf1027b3cdb47d356764d8065458a6e0692642f87443ab29b0117bd5f5a9842289d0debaba5e137cddf865415b4a1f626bafc94ea82d92bde0d4be84ba20afc61c96e97b4b84f65a713441e8333407ed5e7d6aca32be8825ea5819ef2b52e1f9785b90c783b4402cb3343480fb52b4626f6150000", 0x97) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000000000101040000000049c8b959141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c0002800500010000000000080007400000000104001640"], 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r6, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002200)={0x10, 0x0, r9}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fremovexattr(r8, &(0x7f00000002c0)=@random={'trusted.', '\x00'}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/42, 0x2a) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000001940), 0x41}}], 0x1, 0x4044815) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) socket$igmp(0x2, 0x3, 0x2) 2m3.959100441s ago: executing program 4 (id=1845): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x806, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x42, 0x6, 0x0, @private=0xa010100, @remote}, {{0x4e22, 0x4e1f, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x2, 0x0, 0xfe}}}}}}, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x103401, 0x4) write(r0, &(0x7f0000000300)="b7c3e4013257", 0x6) 2m3.838448145s ago: executing program 4 (id=1846): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) (async) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3", 0xae}], 0x1) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) mknod(&(0x7f0000000200)='./config/cluster/mycluster\x00', 0x100, 0x6ad) (async) mknod(&(0x7f0000000200)='./config/cluster/mycluster\x00', 0x100, 0x6ad) r2 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x80}], 0x1, 0x40002102, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4e2300, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4e2300, 0x0) openat$cgroup_pressure(r5, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f00000006c0)={0x8, {"0df6868845934008449b23010356ce43edede9cc1d2148bbec2c60959ff6e90ad0ad22d06ae5768256acae63633e9d783c177a1053a682069927ad1514540f4a6d0592069b72a0a77b0b4549644721eebeaf2226ae2c119b0dc099eda815ddd892e9215e856e3ac5bb6fb60e9fd90dc2d9f8ad9e72d9ffa365632a373fa012d03586662f294787112b5c32f2146a5b07a5c817ccf964b4e3c6e263c5279e52ca4c77172f29f293fb5429237632f0fd4911b1f5e34485a178e189eb5451a2ad5446ae6c54075282e056f7f9ef63770204c565d0c50b403eff57a3e68f678a2ed2efb6692eaf7764972fcb03aadc7c30979e767488501bbe4b7b175fe9e32c796cfe088e8bea85693353ff9f45fe9ed3f88c010fc31edc2dce354ebb2a92856afed154aa3a7edf22366e23f20fa4439d5b6970dcbcfe3ae92e0737bce48eb48097b0451c4fc29974a2cdfd12c5e1cdba0ee501568c2ae0c300973404e265daac4fe1aa8e9cf069ad3f66cc059ec54933a59126636b022f238290e5e7626ad82ea1c04625833b928a2d2e7e9836c8c029caadac9fddfc21316d79a9e0ca542205b0b7bf475c1ae5dd7b642b56656e0001abb102475a4fc8f37d8f096df11198db109c8e15105ca39e91893c2628cd56bc6ace8308b89aa2920767196bd0948f2ae0769dd9667d34ca789d8bf2a2fdd7825021eb22dcfee66d7820906ac59db11dfccbfea776c8f2d4ed3340b484a7d7d1fa140de6540185d06ba17cca66092974b66262a0f765a9c8caa2b23c4b1b4bc7f38292a234794cf09a8c16683d8a53c1da7d2c5411b499d2a7aea8d6a2218434d16981439e39a248214bc51257940605c7046b899b1f6be9089bbb350738341d993dca76acbe3924996bc661a495af540352b4f6cd5179b17a2f3e494aa108506bb83b567929bd992454db94ac8ad80b97cf40b23a4f9cc8ac79bef344117510c45fdae6f5892c81ea3cfe18ff7a4cd99394d361ccc88a8dafec46180ccb1f5bb4084a2d88ea5b4704f4b47365c9df26f1f035b3310021b3be639a0c803bef96cfa98d69d3ca3218905a005119404fa2cfc8391b4cce91e2c2a244079cb59bfa2faec0e2ebfb6a6bb5771f950527542b17a98062eea7846626639b6b2dde0b2e391b3328ac38a3a8206e8841a3d6491db6a9ecc151abdde31f668fc044babbeb5f51f2b4a52c72e54ebf0d91b9cf9af032daf80d2d24a3d59c20ea0b10f567ff92c9142fa8784c391e5656e5c78da332eeeee704f58be06f93bc5dd506e7320bbd742f70f5073aa7b9b1ec23d7ff229f00b0d48a19139e60672167a1757a45e6f09825ccdd1b139c60e17da0591fbec5f16fee76d65e366be8b6419dde48aef16ab9f73f64fbeb0d1d94d4a883e4f9c11bfb2ecd681b758876838cea3c26f3aad49e8f12af53318e2d67446460a241a04e8ef0e983b8a7ae7dbbb066bf1a41fa54d20f936a14c20f72cb0f35183591ab97bec4d13e8f9afbf4f19e48625ce4befa9bb239fd913a8bcd40ce6bffbd08eca4d6f59aa5e0021c45ab612a3e7b599a3ea1ccc9c037195504b0d0555ef6d8b7b65ef9697d980160188f73923990a0950440c14c0fb3f40e7718eb51153a691e62f56a0c94514117dcd193a200125496b581901b7d417b7bfba9249b6059a90d89eac841248edae25561878e455c33f40982f373c4bb5cbfac2d33be357c800deb5b22c1ec49051c381b1685d98d3d5802bce59a341083cfd7af17e6328e9cb1431eb0c590ddad653d5cdd1e4a8b3564795652a8f726b499dd5217397514318a791451ca624c1cde07eb5a8976d6b206ff2975e572b03a92ea7bd3afe10bf3d58f2733dc5cf5a172fbb8e41b01389045b4e1eb4cbc99d79fefa86503114282d6af304fe3391e45f8ef674d4ea7ef54d8953240c864d8f8937746fc7a6b8e1e286277bc1998521adbf749b76d0af9f107667740e565e703b7d7372479b98ebcb83e85a2b0f494191b71128418302068a239951d164538fa6185651237794a300b40a142e2c75a259be18b6a69551b45085f7c9e6e6e977328a163f3405de04c66cf019021976791f8e0973844b39d7b12d7008aca39398324728f01de127cc02c46e9c0db26157f168c34841ece65995a25728fa5cccb856617297fb51e6c2b35154ee16bbb95871bba44f38db3bafb21239fe12fe675e97cbf858cb4a8349ba475ee9f4b44a81b22482b18b2f88ffc5e8f876697d84703bf07cf606700faf9ab41e2af546731224d227b92a22a05ec57743f43ff376bad726033ccadf0e890a267851cc3800c86764e28acbc95ac8972fb720b272d5a618ca7067fcfa29ca588c52a487e75ffe3f8a9757f87d59d4db754f0be9f412e1fe75c3f7e84d6390d0d792e2fc3f74754400de69051b2d2e46fac0d6b031ae0b02a4bb2e1c8602dd3fb6658e51c066ff78cb715f52dd1fe7550a6904e9fd48c760811cce94d7e1cbbdd07410d1f1c7a515ff5053202f0671375aed7053e1ca1907bc0b0d0e57877732345eeb4b434a6addac89eb8c411526134b808c2a62717553448ee02290a33c8e77d4561ce78ec922298d60a6641e68d9e605b88d45bc778f2d160114a409541407d3f4cf77585ad401be5eeabf2355f7302938aa67a1ccaff9f3ab508b65b8f666cc60aa54c534ab55ebbbc4384a3ee90cbdc6b8e74bb9e70f122d78ec8898218992e4e671dcfcd5d448b22800832e15969b07604184c9fd2a00f7991ca5873fce7a3d4f8be86270f4ea98e25732a12a23fb9f6949bf0dbcb870a61fbdfd0fb47e76926035534bca773021fecc251343972a63e4a030a27cec4db8eafbb8eb7b4d549404234eea8e81b95e51a6ee7bff5732458525716dcd6c4083cab4c21725417f0b9cc98423c72072a1a2500bd7fd29fe35d224ba8cf4f3ebcdf16a55eb8303548295a0db91036cb8132b5c685469fe7080f9a08fc1004b19ab41ce20113d3872136aee9dbde0427567edfb0d9f067b30ce519c2faecc46a9b9b0d181d6b74c2e4ff463b0238844393c768c2b27db2064df5f01b35cf093aeb6f65771f48647e6b28af378fdde69b0ad4d01dc4e711a000c626af208ed42da5f3237b01de223c1904de353a99c14e33b1a396b6afe83b2aa30c636bf887431b567f0e04cd79285b7d77a121662af334c6f7a76943f6b9f291545eb7c063aef2d2c18867d9f964bb25b34ae602d0444463644d08450ba594e9827153d504289a1abb537bf43824a3e84f9aac57e9bd545aef7d31901e6182f4d3ad496c8824e8f27a52d4b8e62b840064924235866433e9b1141aaf5fc184e8fee784c22202b5ceb0d282634de1f4272c15595b050ae39ca583f677c1aa8d5f525079569eb5f73bf65623fc355667c01abf6fd5b5632260ad5f7951247d848a265e9136817345bcd19c8a99fbf7671c6edcad5868df4551b04c04bda8bf073f8477b082af47ad5514665e056451ecf73cac5c61aab91c50e559da75e0b6c7bf7ffbff3939fc033b67ff261d1bae46d0ef5fad215742005eda22fd94995594eaf1323f92574ccbc28e802a81dc250759ae232b1404efd173daf369c043a9dbbf3dffe9b9a3dfbdd52dbcc1052daf7a8ca808996324adb6c08ee5651d34f21b37833f7578def41f4f39c0787977888785490769f0df8a43d4b4cc870e2a8d6acf046eb910f962f3e2a53fcccf85a801c71cec8f6cddb8e7cf3c979278d77239467f43f130200e478ee9c6f64a8fb2635af8958dec5dc8d01d3cb3d6f69c19b38a0cc28ebf13714238050b18aa876da7de98df6ec70203a6fb8357e22a81030702256aedb20a02936233b25fd845caf5b5295f56b4aa06c58d05ee56c6b9713705b9369921cb4654296803c44f37c5b50dfb8134847cccc36cfe1a7cd92369a436eb252fb75c42b166d6fa6b6112047e44228110262e62219cdf53673b22ddeb2e09cfb2ff42a9e2f4eedcd18cfc5caebaf57799ab07d790606ce46ca941585286f0140120a6400435cf92b2de46906f92d8a5a59f6c12ba16f7a2036e326a19dbe401c7cd9fd25c045c1ca68172e5b21d19eb7189553ec55830ae84d8741992843970c2939478d2a222b78cca9c7a5a89e02c9adbee7468370c1b5614ab12a637074101151045bb4b70116bbc222119171c4ef71524475bf34d20ba776b0b55a5c51ca290c9b7d157ce05bb300b752b33177ec6f3bced9e38e6292a2083d3294806a3b6f46aa242bbe328eb8c1c203251c5290c4e84eda60188e254e9cdbb4fdc6b8cb8b6f8c288950989b377d18b861313997d9797a19362b2dbb81420194402bbd203c06ddbb736023e59cc8d0ed527da65305db95efac74dc951b243c41c2db5f5b1d3a70b12f86092018758872842e59e355863a69edf58cc264c34da7b60c51837fdec38d449962124e0933ac3c8ff0f15ccbc704537f8c6dcea2a4da5f01d03a415681214f315f1b3b287efa63a8dd2d3e7414a38608888d5c1bdb7b2dec856a579cf0dc4a2f78494ce9d3398f03e7132e1a0531a7017f71f964a8cf01d86d55ff177182a013219ef3f206dd3729255887f48b0860eef607d92a244bcab7609afe601047c88ffdc74bad2e62d21dd938f13bd3abf7f6fba1f88a6cfaa3e1354e91fbfc726ab0ca18cdc56759ae7bcda53bab99ebe0bedebb3357bd88dab7e004b879a2a03c71512b3fede16cf6d621187adc63268bd255905123dc4148f5e7387fba30d8863ca12198877f8d117afea792d9f6b781112dc6c25f0fcbe14671455919a150c74dac32d3850b31e9ee2d63e66600dd5b49dfe5d46be7f68cd97b20f58759e653413ca53d947d9089a68b6afacecf97380d7819af50ada75964e8ef27a27458007f23a671b522c498a846ef5128b8a24bb45fbf3c738b60f7cf1063ed1b4fc58768cbd78927cfca90a09f85eb42f3d705aafb7f16459b2f10ce355e81cf81b52a9c67c2b190cfdcd9dd711e59d5b6a3b89a355f11fcc791e3563dea89f5978853090db7741a9c0e7c78c0b690d671bba73ccc718f8e8ab1b60035e6a1c718bf58d11a81bbeaba60ca52944f308753963e9f03f3236d1075ed5111806f15008ee4ce610e621337015dab86ac20be8490f10451ffbe644c7d53ca467a072f02801819ac6543db0760fd2ade5acec322e77be4f92d84e5295b6da71e596ac411744d7f3f7caea5593a74332c70fc8b67066b2fd657d969d6306be90198a56b8fff1d313d909f37c321d5b3583e75620c525d9d418879cf6cd8d0fa3bc6ce24a60d4bbdd6adc8701fc7e0f8c07d2fb42f934513c69a8a3e022edc60dad0dc7c74330864b63697953ffec7edeb73d2967307bdb319c3de8d1bedc96f37d8ab4ab200c330d37248e5365695ca695bf48f374e89d28b072c1cd99dd6d9cebfce125911ced8dbb073865bb1eadb58bdeb3cdf799e5ed8f3abe02675183afd92bf50cf2c163c565fa051dff293b68a02cc32c10875e0705998cf1deae292ea18a81d20ff51cb1d2fc515bdfae9116f7215a10af34ee6d4dfbcf153e228dd2f86d471735f58dd00390b664210318ecf8935ddfaad56931f80908ae6a2205b7b9c2b3d63ed331c516eef58e6f7bb6a809472ac2301104b07ffefaef3b4684708a14826b2d3aff9d0151d84f146b6fe5e222ccef1f1572b93ab19a066ac915c19b5f4899a72e481c8f42ef7de8bc557dbc5afac13ac40807e5597454c9963b0dd131646fe7386d1698b78f151a496004e98f163fcfdc512e01fe5c4562e15a63e56773454cea745ba142eebe77", 0x1000}}, 0x1006) pread64(r4, &(0x7f0000000380)=""/165, 0xa5, 0x1000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m3.699088745s ago: executing program 4 (id=1847): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x6}) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200), 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x200800) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000002c0)) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000240)={0x1, 0x4, 0x5, 0x6, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47) fallocate(r3, 0x0, 0x37e9, 0x2f92) mount$bind(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 2m3.549428728s ago: executing program 4 (id=1848): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x1000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0410"], 0x4) (async, rerun: 32) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x401) (async, rerun: 32) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xfffffffffffffffe, 0x200002) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x92af, 0x6a10, 0x0, 0x0}, {0x7fff, 0x800, 0xf8, &(0x7f00000002c0)="2f21fe1b17b28641a5444d80757640e65d1bceeb51debac8721758d0f4945fc528a33e092ea89d78624cd3aba735f686143afaf7595a92a2ab6184aa3ef6e5c73e59c4d9f314d573eed854546f20ad39258c2bd9df5a45a88d547a0de134f6395dff0578ad61f9973a99e0b6a7c73f904d81c01026faa57cb8a5b89d5896399ffe8e9dfb42d853f0730025de5c61783a33577df6742b9fd0c2675c2e7ad54ce607c018cf804438d60faa138e8592e1551eb7ff759c936559089494a00a16d0feb34cf7a23c7dea68548e2db5e21def6acdca8b73c113287c71c3913d700575bfc39e884a9454d9a8114b55049c50a6ab67318a3dcb33ae56"}, {0xfffa, 0x1800, 0x41, &(0x7f00000003c0)="e849df6fc51316cda434d65da787de6a7e83b63d160ef74f02f819b1cf379548cc4bae7c65af1f9d137901719c6c4261fe7d8fb6352cecaa2b9599a76626e372f1"}], 0x3}) ioctl$MEMREADOOB64(r1, 0x1269, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000000006000000080003003373b666c0e80751755395d72119bbec1532a7ba546e024abe2ab9bdd797bfecb1c586be8accf047eb8f82966e0fc8207352af7ccd57fb439f9ee3bf755b75330fab73398b61f3f0bd877af140bcf9fddc2ca19cf50fd1aa51ffba61854e6e6e7cab", @ANYRES32=r8, @ANYBLOB="08000500070000000a0018000303030303030000"], 0x30}}, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9b012060e00050018070a0004004000020cefaf00"], 0x17) (async, rerun: 64) read$dsp(r0, &(0x7f0000000180)=""/134, 0x86) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) 2m2.988019166s ago: executing program 4 (id=1851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x68, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 2m2.844141794s ago: executing program 34 (id=1851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x68, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 1m57.120653371s ago: executing program 6 (id=1852): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000f00)={0xf0f003, 0x5}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000a00)='1\x00', 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000004e00)=[{0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/3, 0x3}]}, {0xe2c, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000340)=""/18, 0x12}]}, {0x81, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000f40)=""/4096, 0x1000}]}, {0x7, 0x0, &(0x7f0000003380)=[{&(0x7f0000001fc0)=""/247, 0xf7}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/75, 0x4b}, {&(0x7f0000003140)=""/179, 0xb3}, {&(0x7f0000003200)=""/185, 0xb9}, {&(0x7f00000032c0)=""/174, 0xae}]}, {0x4, 0x0, &(0x7f0000003840)=[{&(0x7f0000003400)=""/98, 0x62}, {&(0x7f0000003480)=""/206, 0xce}, {&(0x7f0000003580)=""/183, 0xb7}, {&(0x7f0000003640)=""/158, 0x9e}, {&(0x7f0000003700)=""/11, 0xb}, {&(0x7f0000003740)=""/57, 0x39}, {&(0x7f0000003780)=""/160, 0xa0}]}, {0x1000, 0x0, &(0x7f0000003a00)=[{&(0x7f00000038c0)=""/18, 0x12}, {&(0x7f0000003900)=""/4, 0x4}, {&(0x7f0000003940)=""/37, 0x25}, {&(0x7f0000003980)=""/110, 0x6e}]}, {0x7, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003a40)=""/67, 0x43}, {&(0x7f0000003ac0)=""/98, 0x62}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/253, 0xfd}]}, {0x6, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004c80)=""/10, 0xa}]}, {0xffff, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004d00)=""/119, 0x77}, {&(0x7f0000004d80)=""/63, 0x3f}]}], 0x9) 1m56.868093124s ago: executing program 6 (id=1867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1eb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m55.678727065s ago: executing program 6 (id=1880): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/221, 0xdd}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2, 0x3, 0x20000000) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x73, &(0x7f0000000280)=0x5) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0x30c}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="3f9d000000000000000017000000", @ANYRES32, @ANYBLOB="60003080050002000000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x4) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 1m48.633691626s ago: executing program 6 (id=1880): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/221, 0xdd}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2, 0x3, 0x20000000) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x73, &(0x7f0000000280)=0x5) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0x30c}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="3f9d000000000000000017000000", @ANYRES32, @ANYBLOB="60003080050002000000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x4) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 1m47.706693035s ago: executing program 6 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a300)=@getchain={0x54, 0x66, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0x6}, {0x4, 0x8009}, {0x10, 0xffe0}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}]}, 0x54}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) r11 = geteuid() r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r10, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x207f) write$FUSE_INIT(r12, &(0x7f0000000040)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r12, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r12, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r14, r15, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f0000000140)='./file0\x00', r11, r15, 0x100) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x11, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m47.170924623s ago: executing program 6 (id=1956): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000001c0)={0x768, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x11a, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ff6}, @broadcast, @broadcast, @random="a8ff68b8e57d", {0x7, 0x9}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x3, @broadcast, 0x2, @value=@device_b, 0xe79d, 0xfffffffb, @device_b, 0x9}}, @val={0x84, 0xcf, {0xa, 0xd, [{{}, @broadcast, 0x0, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x5a2, @value=@broadcast, 0x1d}, {{}, @broadcast, 0x2a, @void, 0x37}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0xfffffff7, @value=@device_b, 0x41}, {{}, @device_a, 0xb2, @void, 0x15}, {{}, @broadcast, 0xe75, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x39}, {{}, @device_b, 0x236c, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x10, @value, 0x14}, {{}, @device_a, 0x3, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x36}, {{}, @device_b, 0xff, @void, 0x21}]}}, @void}}}}, @NL80211_ATTR_FRAME={0x22c, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @random="401990a7cabf", @device_b, @initial, {0xf, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x4101, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x297, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @broadcast, @initial, {0xc, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="1a2f7ec62f70", @broadcast}}, @NL80211_ATTR_FRAME={0x128, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x2}, {0x7}, @device_a, @initial, @device_a, {0x1, 0x9}}, @a_msdu=[{@device_a, @device_b, 0x47, "52f5fd4dc3594d0d1a7e676a1b82f7e08a4a9593701b6bcce6b1f187bd0da4aa0bc0e90a52f72f06f337b1a5fdb84f6f8358d9321b0c6c6c81e38f8db986cfeb61e7ef7a2b59a9"}, {@device_b, @device_a, 0xa6, "9aeccb9661d884d17983126cf11a7d69c8f37f169ecbcd83f466956a4ea10634535b8b0040720d11bd2d2b87b9f6fc25ab9d30aa57b0f7ec389cd7dcb566e311103ab9998cb1808f258732fb3b4c2c7b03da96f6e80fa2ab214f3942f13292bd54b6a473ed1b72a1c89bb9b441e3883ca6db65afdba79bb305c32c2479ae264a7feb1692f5cc967259329b93d0e824e843e6126dc688baf57e72b7d85ff11f18d6e404564e8a"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1000}, @broadcast, @from_mac=@device_b}}]}, 0x768}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a40)=0x1, 0x4) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000ac0)) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7185}]}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x4004850) timer_create(0x5, &(0x7f0000000e00)={0x0, 0x39, 0x4, @thr={&(0x7f0000000c40)="f47b76659bfb9f315bcc0fa07c5edc153349dd9472bde53bcd89ec8e173abe4c14cfcaf9edf6b45f77af03ca3dd6129191019ff8a77ae592cf899c25b00c55cd0d37d3a460f4183dab7ef40f10c343039dac8190c494c5297851c1b3cd9857feef2e27bbb98c5842ec7344d6d34e726959aa68e50aa70614df93e47fc7f9279dbc11018765c10d5e6a23d577f33e10788a34e75ca3a61eda7cf3fdc639a9733665be7255a641a6b06383f4a6b4d1d7e1b6e69a7dbdf08112b647a7698ab509bef2b4effa48dcb8e4b0364e9d9a7de13a417bab853fbea54dfeff00cea710ef86f5afeb67426c4df0a8", &(0x7f0000000d40)="9f84d5aa653afeb7c2c3cc1dc32fd05fee862f84a3ef060b0ae754258478e2bd7584de93d135bbc1c542f3dafd1dbd74948f2d162ec720b7af3607551daba8fd4d9c1347befb32f346681e3e67259fc66048dd15892c5a8fbcebfcd98da6b6a00b4cf3b6c50a69b3c19a6f5b02b667e2d1ba2ba630409681695bb743541d5fa97ae9a53392377721b7c89484eddd7effdcf773f225c1c32944"}}, &(0x7f0000000e40)) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r7, &(0x7f0000000e80)="09d40c0bb3cea8b916a98aeaa17cb23088a1b67fa5ceaccc2e88ce4a0057ec23a422e8eda6e7289915ed96718b4d7645a452287864ff49d504b94bbdb5dc670a764d0cba2a399904057a16ccc9f5221c760d225288a819175a089b847b668d0076687ee1b571adede5b7ccf9d8bca65113d4259d6c297ab4c23c88ff354d52b7f6ad5ca3bdddafb92d021cf5711a6e309353a47b6a1fd6465bad4225ebe27d32a80048917e76e74ad6b71d8d0fe454f082b2babd58582c45662a035632a9ba14f7f0335bc51f7e7a30694b36e7323b7004ae60cbcb2812", 0xd7, 0x4000805, &(0x7f0000000f80)=@phonet={0x23, 0xf4, 0xf, 0x8}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000001040)={0x1000, 0x8, '\x00', 0x0, &(0x7f0000001000)=[0x0]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000001440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001100)={0x2ec, r6, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x8, 0x0, @random="56230f03"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x170, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4c54aae35637"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xde4a}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random='1'}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="20d16e494d6d9aa589850593bfc7e47fac50d4ab34155539d9826c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x668}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff31d}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9a94817aac89"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="f603aae76d0937b65565849a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="3cebc7bcec8fd64bd9a6747b8202368ef82f3e0baab8fa764d8150da"}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x130, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="c41a9b7b4df617a1056548a5b803318a8e02bb773ae10c59e6adcd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c47ee6375464"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xdf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x8000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7d}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="98da7ad9bdd6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="a5c06abdd349cc3d767b441dadd0f6b5f57560cdce13"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xf}, @NL80211_BAND_5GHZ={0x8}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}]}, 0x2ec}}, 0x20040805) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000001480)={0x0, 0x6, 0xe2bb, 0xe8b, 0x400}) sendmsg$nl_crypto(r1, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)=@alg={0xf0, 0x10, 0x800, 0x70bd25, 0x25dfdbfd, {{'xts(camellia)\x00'}, '\x00', '\x00', 0x1400, 0x400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x7}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44090}, 0x44811) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001680)={0x0, "54e776fc6f6a7a152b062eecd5170751"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002680)={r9, 0x57, 0xa8f, 0x1}) r10 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000002c00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x695b3ef13028981a}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0xb0, r11, 0x2, 0x10, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc004}, 0x48) write$tun(r10, &(0x7f0000002c40)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @local, @random="0be10052bf2e", @remote}}, 0x34) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000002d80)={@pptp={0x18, 0x2, {0x0, @loopback}}, {&(0x7f0000002c80)=""/130, 0x82}, &(0x7f0000002d40), 0x48}, 0xa0) syz_80211_inject_frame(&(0x7f0000002e40)=@device_b, &(0x7f0000002e80)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @device_a, {0x2, 0x4}, @device_a, @void, @value=@ver_80211n={0x0, 0x40, 0x3, 0x2, 0x0, 0x2, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xb4, "052f597607f2aeb2c559dc4ddd43fef35530397b4d94f53d9bb326ccc859cb08bf15b638f01e0649b99c031527e192a0cf8a846a33be5d894061d2b08163af8596072cde24babc92214e150eb79c54da59951e6c6bb31f36e4507d8eb5832753a7770ac5a7915e5d4de660f11c11e05b799ed4f03c5bd78b182ae7fedf95c62c29118eb2e12e103a2d757a52b173b5f84f680cb74e973dd811ba23bb43c18728e8b47ca45b1e18aa6149ac09f2fade3037152379"}, {@broadcast, @broadcast, 0x84, "65d11323932ab1446aa4864cd54371329da17fd78819c3285023761b61fb44883d15e4d2faa035d2dd6fe282a1fcc143a786e3161548547e8009e3025f78e6ba6d8f7ba876a289dd6a98ac9aa31fcb6a6994990d577dca30358762dd09b6035d72bada8de6cdd5a588257a184e2d44d75df84ee151c189c326019c6d971ec3fa3f79c6c4"}, {@broadcast, @broadcast, 0xea, "d8bcaf373c8a474fae6dbf288be4476225b32730bf7bd65cba215cf1f4a6dd13c71d5f1fa2cf0544abe2f62ef00679b370ed4439f70a577483ae4b2a2227afc3e18ff0c372c76baaee7ebfb5a360e04d5b0b74bd41e527dbd60e6cc21d4a7b8c4cda5df7a13a684a979c14b556d0e88e30800291c1afb0cb8ace2aeedfb53228d2fa02ee2887fd60495cedbbac82f6930341949905513e91529f4f602c3a7fe80461e507420ffd57185c0d298b098ae851e2d5602b824dc206e7245437eab6ed4afb103d60b43589fb6decf4da455c4d352c1d3f1ab698726e772282629d2f85828c299b0273a45c8e1c"}, {@device_b, @broadcast, 0xc3, "f31685274980afbc8aa9674b910c63c5ba550c013a7dea621c85ca6b36c3adb01e54d7eac5b95a27e53cb022c457e45a4e54d365ec899bc8b4a0b914b1212d222ba7bc5bfbd2c99bcd9e76ebb544a73f69d17736fed6fb1f7e55164e1ab5a691e3813f1930244577ed0e9d0356bdd03f0507179e950c57f4df772be8c5583bb7e6406c1142481ec81ecdbeefbc2d6096901f8ede4f7822a0cddc6a2aa38db3a66f83a9861a190f86dcf50f8817cd3a35d8c2147cc20f80a3f00407979fc938f1ce7f42"}, {@broadcast, @device_b, 0xca, "41189f85f6de07aee607698d36a9d88b40bce4175b6a5b63664bd4e947c1c58548ad8e989d3944e9e2990b708f72b757174af690e6aab2c1a6a0e3876e233f89882f89bd68d1d9f4a575b781e88c28369fa0bfb09f108d6da9bcb585e8f5eb79ddc5fb6df4142e465db9f7f6b62f23efc0f3932dedf58c6cbd2b5d89694afc55a2418687ea57aa529d43f6e99fd22fc2eaaff03775796ba8dbd66895faf81575e643b37743c7c49169a0317655bb6c94255bcdc58e3a043364b82e485d10e2b4ae00d31ddc6c364f7e04"}]}, 0x41e) 1m46.891914163s ago: executing program 35 (id=1956): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000001c0)={0x768, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x11a, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ff6}, @broadcast, @broadcast, @random="a8ff68b8e57d", {0x7, 0x9}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x3, @broadcast, 0x2, @value=@device_b, 0xe79d, 0xfffffffb, @device_b, 0x9}}, @val={0x84, 0xcf, {0xa, 0xd, [{{}, @broadcast, 0x0, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x5a2, @value=@broadcast, 0x1d}, {{}, @broadcast, 0x2a, @void, 0x37}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0xfffffff7, @value=@device_b, 0x41}, {{}, @device_a, 0xb2, @void, 0x15}, {{}, @broadcast, 0xe75, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x39}, {{}, @device_b, 0x236c, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x10, @value, 0x14}, {{}, @device_a, 0x3, @void, 0x32}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x36}, {{}, @device_b, 0xff, @void, 0x21}]}}, @void}}}}, @NL80211_ATTR_FRAME={0x22c, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @random="401990a7cabf", @device_b, @initial, {0xf, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x4101, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x297, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @broadcast, @initial, {0xc, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="1a2f7ec62f70", @broadcast}}, @NL80211_ATTR_FRAME={0x128, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x2}, {0x7}, @device_a, @initial, @device_a, {0x1, 0x9}}, @a_msdu=[{@device_a, @device_b, 0x47, "52f5fd4dc3594d0d1a7e676a1b82f7e08a4a9593701b6bcce6b1f187bd0da4aa0bc0e90a52f72f06f337b1a5fdb84f6f8358d9321b0c6c6c81e38f8db986cfeb61e7ef7a2b59a9"}, {@device_b, @device_a, 0xa6, "9aeccb9661d884d17983126cf11a7d69c8f37f169ecbcd83f466956a4ea10634535b8b0040720d11bd2d2b87b9f6fc25ab9d30aa57b0f7ec389cd7dcb566e311103ab9998cb1808f258732fb3b4c2c7b03da96f6e80fa2ab214f3942f13292bd54b6a473ed1b72a1c89bb9b441e3883ca6db65afdba79bb305c32c2479ae264a7feb1692f5cc967259329b93d0e824e843e6126dc688baf57e72b7d85ff11f18d6e404564e8a"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1000}, @broadcast, @from_mac=@device_b}}]}, 0x768}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a40)=0x1, 0x4) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000ac0)) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7185}]}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x4004850) timer_create(0x5, &(0x7f0000000e00)={0x0, 0x39, 0x4, @thr={&(0x7f0000000c40)="f47b76659bfb9f315bcc0fa07c5edc153349dd9472bde53bcd89ec8e173abe4c14cfcaf9edf6b45f77af03ca3dd6129191019ff8a77ae592cf899c25b00c55cd0d37d3a460f4183dab7ef40f10c343039dac8190c494c5297851c1b3cd9857feef2e27bbb98c5842ec7344d6d34e726959aa68e50aa70614df93e47fc7f9279dbc11018765c10d5e6a23d577f33e10788a34e75ca3a61eda7cf3fdc639a9733665be7255a641a6b06383f4a6b4d1d7e1b6e69a7dbdf08112b647a7698ab509bef2b4effa48dcb8e4b0364e9d9a7de13a417bab853fbea54dfeff00cea710ef86f5afeb67426c4df0a8", &(0x7f0000000d40)="9f84d5aa653afeb7c2c3cc1dc32fd05fee862f84a3ef060b0ae754258478e2bd7584de93d135bbc1c542f3dafd1dbd74948f2d162ec720b7af3607551daba8fd4d9c1347befb32f346681e3e67259fc66048dd15892c5a8fbcebfcd98da6b6a00b4cf3b6c50a69b3c19a6f5b02b667e2d1ba2ba630409681695bb743541d5fa97ae9a53392377721b7c89484eddd7effdcf773f225c1c32944"}}, &(0x7f0000000e40)) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r7, &(0x7f0000000e80)="09d40c0bb3cea8b916a98aeaa17cb23088a1b67fa5ceaccc2e88ce4a0057ec23a422e8eda6e7289915ed96718b4d7645a452287864ff49d504b94bbdb5dc670a764d0cba2a399904057a16ccc9f5221c760d225288a819175a089b847b668d0076687ee1b571adede5b7ccf9d8bca65113d4259d6c297ab4c23c88ff354d52b7f6ad5ca3bdddafb92d021cf5711a6e309353a47b6a1fd6465bad4225ebe27d32a80048917e76e74ad6b71d8d0fe454f082b2babd58582c45662a035632a9ba14f7f0335bc51f7e7a30694b36e7323b7004ae60cbcb2812", 0xd7, 0x4000805, &(0x7f0000000f80)=@phonet={0x23, 0xf4, 0xf, 0x8}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000001040)={0x1000, 0x8, '\x00', 0x0, &(0x7f0000001000)=[0x0]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000001440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001100)={0x2ec, r6, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x8, 0x0, @random="56230f03"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x170, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4c54aae35637"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xde4a}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random='1'}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="20d16e494d6d9aa589850593bfc7e47fac50d4ab34155539d9826c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x668}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff31d}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9a94817aac89"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="f603aae76d0937b65565849a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="3cebc7bcec8fd64bd9a6747b8202368ef82f3e0baab8fa764d8150da"}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x130, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="c41a9b7b4df617a1056548a5b803318a8e02bb773ae10c59e6adcd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c47ee6375464"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xdf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x8000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7d}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="98da7ad9bdd6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="a5c06abdd349cc3d767b441dadd0f6b5f57560cdce13"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xf}, @NL80211_BAND_5GHZ={0x8}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}]}, 0x2ec}}, 0x20040805) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000001480)={0x0, 0x6, 0xe2bb, 0xe8b, 0x400}) sendmsg$nl_crypto(r1, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)=@alg={0xf0, 0x10, 0x800, 0x70bd25, 0x25dfdbfd, {{'xts(camellia)\x00'}, '\x00', '\x00', 0x1400, 0x400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x7}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44090}, 0x44811) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001680)={0x0, "54e776fc6f6a7a152b062eecd5170751"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002680)={r9, 0x57, 0xa8f, 0x1}) r10 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000002c00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x695b3ef13028981a}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0xb0, r11, 0x2, 0x10, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc004}, 0x48) write$tun(r10, &(0x7f0000002c40)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @local, @random="0be10052bf2e", @remote}}, 0x34) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000002d80)={@pptp={0x18, 0x2, {0x0, @loopback}}, {&(0x7f0000002c80)=""/130, 0x82}, &(0x7f0000002d40), 0x48}, 0xa0) syz_80211_inject_frame(&(0x7f0000002e40)=@device_b, &(0x7f0000002e80)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @device_a, {0x2, 0x4}, @device_a, @void, @value=@ver_80211n={0x0, 0x40, 0x3, 0x2, 0x0, 0x2, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xb4, "052f597607f2aeb2c559dc4ddd43fef35530397b4d94f53d9bb326ccc859cb08bf15b638f01e0649b99c031527e192a0cf8a846a33be5d894061d2b08163af8596072cde24babc92214e150eb79c54da59951e6c6bb31f36e4507d8eb5832753a7770ac5a7915e5d4de660f11c11e05b799ed4f03c5bd78b182ae7fedf95c62c29118eb2e12e103a2d757a52b173b5f84f680cb74e973dd811ba23bb43c18728e8b47ca45b1e18aa6149ac09f2fade3037152379"}, {@broadcast, @broadcast, 0x84, "65d11323932ab1446aa4864cd54371329da17fd78819c3285023761b61fb44883d15e4d2faa035d2dd6fe282a1fcc143a786e3161548547e8009e3025f78e6ba6d8f7ba876a289dd6a98ac9aa31fcb6a6994990d577dca30358762dd09b6035d72bada8de6cdd5a588257a184e2d44d75df84ee151c189c326019c6d971ec3fa3f79c6c4"}, {@broadcast, @broadcast, 0xea, "d8bcaf373c8a474fae6dbf288be4476225b32730bf7bd65cba215cf1f4a6dd13c71d5f1fa2cf0544abe2f62ef00679b370ed4439f70a577483ae4b2a2227afc3e18ff0c372c76baaee7ebfb5a360e04d5b0b74bd41e527dbd60e6cc21d4a7b8c4cda5df7a13a684a979c14b556d0e88e30800291c1afb0cb8ace2aeedfb53228d2fa02ee2887fd60495cedbbac82f6930341949905513e91529f4f602c3a7fe80461e507420ffd57185c0d298b098ae851e2d5602b824dc206e7245437eab6ed4afb103d60b43589fb6decf4da455c4d352c1d3f1ab698726e772282629d2f85828c299b0273a45c8e1c"}, {@device_b, @broadcast, 0xc3, "f31685274980afbc8aa9674b910c63c5ba550c013a7dea621c85ca6b36c3adb01e54d7eac5b95a27e53cb022c457e45a4e54d365ec899bc8b4a0b914b1212d222ba7bc5bfbd2c99bcd9e76ebb544a73f69d17736fed6fb1f7e55164e1ab5a691e3813f1930244577ed0e9d0356bdd03f0507179e950c57f4df772be8c5583bb7e6406c1142481ec81ecdbeefbc2d6096901f8ede4f7822a0cddc6a2aa38db3a66f83a9861a190f86dcf50f8817cd3a35d8c2147cc20f80a3f00407979fc938f1ce7f42"}, {@broadcast, @device_b, 0xca, "41189f85f6de07aee607698d36a9d88b40bce4175b6a5b63664bd4e947c1c58548ad8e989d3944e9e2990b708f72b757174af690e6aab2c1a6a0e3876e233f89882f89bd68d1d9f4a575b781e88c28369fa0bfb09f108d6da9bcb585e8f5eb79ddc5fb6df4142e465db9f7f6b62f23efc0f3932dedf58c6cbd2b5d89694afc55a2418687ea57aa529d43f6e99fd22fc2eaaff03775796ba8dbd66895faf81575e643b37743c7c49169a0317655bb6c94255bcdc58e3a043364b82e485d10e2b4ae00d31ddc6c364f7e04"}]}, 0x41e) 1m19.178819224s ago: executing program 0 (id=2220): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x6, 0x0, [{0x490, 0x0, 0x7}, {0x9f7, 0x0, 0xff}, {0x206, 0x0, 0x8cf}, {0x242, 0x0, 0x9}, {0x24e, 0x0, 0x9}, {0x9b2, 0x0, 0xfffffffffffffffe}]}) r6 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000300)=""/15, 0xf, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000000)) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, &(0x7f00000002c0)={&(0x7f0000000200)=[{0x0, 0x1, 0x0, {0x5, 0x1, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0x8, 0x2}}, {0x3, 0x2, 0x0, {0x9, 0x6, 0x1}}, {0x0, 0x0, 0x0, {0xe000000000000000, 0x10001, 0x1}}, {0x7fffffffffffffff, 0x1, 0x0, {0x1, 0xfffffffc, 0x1}}], 0x5, 0x20, 0x959, 0x7ff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000880)={{r1}, 0x0, 0x4, @inherit={0x48, &(0x7f0000000080)={0x1, 0x0, 0xffffffff, 0x0, {0x1, 0x4, 0x1, 0x10, 0x3}}}, @name="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"}) 1m18.889260399s ago: executing program 0 (id=2226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x102) write(r0, &(0x7f0000000240)='0000:00:1d.7', 0xc) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000253000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/7, 0x7, 0x1, &(0x7f00000001c0)=""/11, 0xb}, &(0x7f0000000240)=0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.604705137s ago: executing program 0 (id=2230): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x9a6, 0x8, 0x3, 0x1ca}, 0x0, 0x4, &(0x7f0000002080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x4b6, 0x0, 0x0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x100) r5 = syz_io_uring_setup(0x116e, &(0x7f0000000280)={0x0, 0xfc57, 0x2000, 0x3, 0x2a9}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r6, 0x0, 0x1000, 0x10, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000600)={0x28, 0x28, 0x0, r5, &(0x7f0000000500)="32626ff09ae5e71defbfa5cff4b5896ae3964deba7b8628e735bd48f18f7d814316fe6652c6fd782625318227da88040fd51d9fa624fb10b55f49bba60a2f5e93549f5a803c9c14f20f8a9d9fa9d0dd101b357a58b0911734c5c7b2fd59551e0f72b4b9b5ceca4a611bbb4fc93ec85e19b77172b7eb717b5ae15881b6cdcba1d9819810794c742ba1cc75fa5ee2dc1cda82a61b1486c9273ddf2fedb31f7449aeda21fe7bbce99c0676e726bd9b6e1708ad136e845ca1424ca97afe3193d5dc1c1fa777285cf6e9d3e5b6790edf2a3a99b680f9572163a77f83533d286341feca20245", 0x47b4b8adfc6dd0b4, 0x8, 0x0, 0x1, {0x0, 0x0, r6, 0x3}}, 0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) r8 = syz_io_uring_setup(0x6f5b, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000500), 0x0) io_uring_enter(r8, 0x11, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,unc=\\\\127.0.0.1\\share,nodfs\x00') 1m18.398976264s ago: executing program 0 (id=2232): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1000, 0xfdef) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x46940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000800)={0xb, 0x1, 'client1\x00', 0x80000000, "d60f0efcbd80ce2c", "7d2918ec3fffd528c24380717b559af5101f420688ffb23ba3a5221d272ca522", 0x9, 0x401}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000031401002cbd7000fbdbd5567a93bd2181772f61abdf250900a539dba45eb277020073797a31000000000800410073697700140033007866726d3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0x4c802) 1m18.166993464s ago: executing program 0 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) (rerun: 64) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@deltclass={0x34, 0x29, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0x0, 0x4}, {0xfff1, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4c}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002680)=@newqdisc={0x150, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x10, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_pfifo={{0x23}, {0xfffffffffffffe08, 0x2, 0x1}}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xfff, 0x7ff, 0x2, 0x0, 0x8, 0x4}}, {0xc, 0x2, [0xc455, 0x7c28, 0x3, 0xffff]}}, {{0x1c, 0x1, {0x7, 0x7, 0x8, 0xfffffffd, 0x1, 0x7, 0x0, 0xa}}, {0x18, 0x2, [0xe, 0x80, 0x2, 0x1bf4, 0x597, 0x2, 0x8, 0x4, 0x6, 0x40]}}, {{0x1c, 0x1, {0x1, 0x0, 0x2, 0x5, 0x0, 0x2, 0x7, 0x6}}, {0x10, 0x2, [0xfff, 0x3ccb, 0x9, 0xa, 0x4, 0x2c87]}}, {{0x1c, 0x1, {0x7, 0x1, 0x1, 0x100, 0x2, 0x8000, 0xf, 0x7}}, {0x12, 0x2, [0x8, 0x6, 0x8, 0x7, 0x504, 0x7, 0xd]}}, {{0x1c, 0x1, {0x5, 0xf, 0x0, 0xfffffff8, 0x1, 0x7, 0x7, 0x4}}, {0xc, 0x2, [0x8001, 0xd, 0x3, 0x800]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x150}}, 0x20000010) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2880, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000022c0), 0x2c080) r6 = dup(r5) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) (async) syz_emit_ethernet(0xbe, &(0x7f0000002500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a17a37fbdef7b7c93dffd87de214342f2831b69a24acf5d86779f67562daf83089cc4f8ee170d57ac0c501a610facdf6eef718bc8b6ab2c5816e137f2a6ce0a778bdc50d34a89540ea3cb858c0ff9d210e29063d0a61f1aaa7fa57fb515a5cc8ef1026a2af9755efac63479627c125f7e0178d5c0a0a99805e3e775b3fa93e9ed80edb761c75bfc5e01a1cd10b241c03d6a0d219dd13af4123eedd26a1b812581a5adf40374190a41ef187dc7ed97ca6912ec345c8c3206cd597f4f5e8a04eda712e"], 0x0) (async) syz_open_pts(r4, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x102800) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r10) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) dup(r9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002240)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r7, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000040)={0xe, 0x0, 0x7}) (rerun: 32) 1m17.349462605s ago: executing program 0 (id=2241): syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) 1m17.215684043s ago: executing program 36 (id=2241): syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) 1m6.265060658s ago: executing program 5 (id=2373): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x401}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003840)='/dev/bsg/2:0:0:0\x00', 0x80000, 0x0) ioctl$BSG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000003880)=0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x54, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x2, 0x7}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x8d5f}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) 1m6.137382507s ago: executing program 5 (id=2375): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000002000/0x2000)=nil, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000340)={{}, {0x18}, 0x0, 0x3}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2fdff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x1d5, 0x0, &(0x7f0000000640)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x3}, 0x50) 1m5.672257975s ago: executing program 5 (id=2385): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m5.595502843s ago: executing program 5 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_gettime(r1, &(0x7f0000000080)) (rerun: 32) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000013c0)={0x18, r4, 0x1, 0x3, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) (async) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) (async, rerun: 32) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x439, 0xfffffffe, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) 1m5.54814104s ago: executing program 5 (id=2389): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='./proc/fs/nfsd\x00', &(0x7f0000000040)='./proc/fs/nfsd\x00', &(0x7f0000000080), 0x46000, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 1m5.457334621s ago: executing program 5 (id=2390): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') (rerun: 32) getdents64(r1, &(0x7f0000000240)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000004c0)=0x3, 0x4) (async, rerun: 32) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@random="8cbea541b3d0", @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x0, 0x6, 0x0, 0x0, "c84a41ce7904179a"}}}}, &(0x7f0000000340)={0x1, 0x4, [0xe38, 0x2b5, 0x4f8, 0x879]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000027ec7401000000e600040001000000000000"], 0x1c}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) (async, rerun: 64) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (rerun: 64) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca34fff48080100000000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x80}], 0x1, 0x20048800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 50.456548614s ago: executing program 37 (id=2390): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') (rerun: 32) getdents64(r1, &(0x7f0000000240)=""/44, 0x7a) getdents64(r1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000004c0)=0x3, 0x4) (async, rerun: 32) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@random="8cbea541b3d0", @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x0, 0x6, 0x0, 0x0, "c84a41ce7904179a"}}}}, &(0x7f0000000340)={0x1, 0x4, [0xe38, 0x2b5, 0x4f8, 0x879]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000027ec7401000000e600040001000000000000"], 0x1c}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) (async, rerun: 64) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (rerun: 64) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca34fff48080100000000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x80}], 0x1, 0x20048800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8.496382359s ago: executing program 9 (id=3019): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) 8.42144814s ago: executing program 9 (id=3022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.351360716s ago: executing program 9 (id=3026): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xf72cb191e650c8a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x7e, 0x3}, {0x28, '\x00', @buffer={"01a039b9a9043c0ef07feaacdd6b237b0576826fe58918aef361001db947b89d", 0x20}}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x31]}}) 8.280914679s ago: executing program 9 (id=3032): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0xfffff800, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000012640)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7fff, 0x2, 0x6, 0x7fff}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff8f}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000700)=@ethtool_stats}) fcntl$getown(r4, 0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000008}) 8.090706197s ago: executing program 9 (id=3036): syz_io_uring_setup(0x830, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 7.889216601s ago: executing program 9 (id=3043): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, 0x0}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r6, &(0x7f0000000100)=@abs, 0x6e) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) (async) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) write(r0, &(0x7f0000000000)="7472616e73706f73743d7463702c747261723d3132372e302e302eb12c747273766369643d3a3030302c6e716e3d6e32e0a261", 0x33) 7.754707849s ago: executing program 38 (id=3043): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, 0x0}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r6, &(0x7f0000000100)=@abs, 0x6e) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) (async) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) write(r0, &(0x7f0000000000)="7472616e73706f73743d7463702c747261723d3132372e302e302eb12c747273766369643d3a3030302c6e716e3d6e32e0a261", 0x33) 1.352231351s ago: executing program 2 (id=3160): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, &(0x7f0000002080)=[{0x0}, {&(0x7f0000000180)="c9edc668922493667938ad63bc077c124dcd1220d80884f5d61b23b640b29a0166f2211cc327dbece4441c6368a60806302a87969f2b9a93e0cbf265f0826ff8439e73521675b5d8041c0b02891714e443c230a9e96ee0c1a9", 0x59}, {&(0x7f0000000f80)="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", 0xfa8}], 0x3}}], 0x1, 0x2400c042) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100000500000000000000000000000000000000000009ac59fcef79b2bf16b5c723de52f63e06c9e8e12497103004db0594ae90ca34e4825bf19aa2ce0de4ce9b7d32b22183930fa65f3d675d5d747e1f087056d4a84df22bd03ea259d52dea9f3310636c62c31e9675d29bfdceccf395a247c01e8a5c16e22b602a6f629f8e682c34be571d3849cec1fff364e343cef736e59ab69a47ac0cc9e42663e26c2c9b33eafbc533e87c5496e8a878648ce4b1a5563b6e259ca9e910d9f520456f140bf5a4dd15fa497cdc36bc68fe8052bd3f6ce94eeb395a9f7a1b0da59dfa272e6ec1bf573ff3439679c1310caad0c5a9aff7bfc20c2893704a7c80dfd37489abe11290bf55a154f6f1bd7c8dc90d4a974700d116c4c5c78b2a1b2e8f6f63c89d14f4465aba89ef485d67a0147e43160bf1f88b59ee70c73d91b33156c31c925bb7b82e8aa58650b447cfcb11fa7f164491511d2ec529"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) 1.283617933s ago: executing program 2 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) write(r0, &(0x7f0000000040), 0x0) 1.23369294s ago: executing program 2 (id=3163): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x3fc) close(r0) 1.083181664s ago: executing program 2 (id=3168): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x8, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f0000000000)='-0', 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) r11 = getegid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, r10, r11, 0x0, 0x0, 0x110, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x7, 0x0, 0x6, 0x400}) 772.861921ms ago: executing program 8 (id=3178): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xf72cb191e650c8a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x7e, 0x3}, {0x28, '\x00', @buffer={"01a039b9a9043c0ef07feaacdd6b237b0576826fe58918aef361001db947b89d", 0x20}}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x31]}}) 680.779032ms ago: executing program 8 (id=3181): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 613.84765ms ago: executing program 3 (id=3182): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) write(r0, &(0x7f0000000040)="b7594eed021c3a96f6746313ef9f6ee47e865f61860f4ecb5964", 0x1a) 613.530567ms ago: executing program 3 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4d50}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044040}, 0x4048410) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x9, 0xfffff00c}, {0x6, 0x9, 0xa1, 0xc625}]}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 460.18122ms ago: executing program 8 (id=3184): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) (fail_nth: 3) 403.995458ms ago: executing program 8 (id=3186): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0x1}) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 403.854916ms ago: executing program 3 (id=3187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x3fc) close(r0) 343.605095ms ago: executing program 8 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7fffffff, 0x7, 0x7, 0x580, 0x0, 0x100, r3}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x7c, 0x11, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x30}, @IFLA_PORT_PROFILE={0xf, 0x2, 'veth1_vlan\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "827bac37c71c51dd31f72807469420ba"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6a9c91350a0b65bad965279a3a689913"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880)="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", 0x8e5b, r5}, 0x38) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000020c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf250100000000000000024133e7ff"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r8 = timerfd_create(0x0, 0x80000) timerfd_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f0000000300)={r10, 0x0, 0x1, 0x3ff, 0x9, 0xf}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) 343.238983ms ago: executing program 3 (id=3189): syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0xb96b, 0x4000, 0x0, 0x4000}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (fail_nth: 1) 261.506113ms ago: executing program 7 (id=3190): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0001"], 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 257.578366ms ago: executing program 7 (id=3191): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) write(r0, &(0x7f0000000040)="b7594eed021c3a96f6746313ef9f", 0xe) 204.426395ms ago: executing program 3 (id=3192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 203.985578ms ago: executing program 7 (id=3193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 152.19425ms ago: executing program 8 (id=3194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x8) syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0xb96b, 0x4000, 0x0, 0x4000}, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 151.860323ms ago: executing program 2 (id=3195): setreuid(0xee01, 0xee01) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x6d, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 73.103105ms ago: executing program 7 (id=3196): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/ACPI0012:00/driver/unbind\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "b8e21d", 0x1}}}, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000f8dbdf2502000059cd12a0c84acbbf0008000c01"], 0x20}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x3, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x66, 0x0, 0xb, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x22}, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4a34d82d5c69d707, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00!Qb\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) write(r2, 0x0, 0x0) 72.83535ms ago: executing program 2 (id=3197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x88142, 0x0) poll(&(0x7f0000000080)=[{r4, 0x8104}], 0x1, 0x26) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r5) pwrite64(r4, &(0x7f0000000700)="19", 0x1, 0x3fc) symlinkat(&(0x7f0000000000)='./dev/zram0\x00', r4, &(0x7f0000000040)='./dev/zram0\x00') 3.867708ms ago: executing program 7 (id=3198): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000700), 0x0, 0x3fc) close(r0) 3.40832ms ago: executing program 7 (id=3199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000100"], 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3200): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffffe0af, 0x6, {0xffffffffffffffff}, {}, 0x40, 0x3}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) creat(&(0x7f0000000080)='./cgroup\x00', 0x20) sendfile(r2, r2, 0x0, 0x3) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) 0s ago: executing program 7 (id=3201): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) (fail_nth: 15) kernel console output (not intermixed with test programs): 13020kB [ 239.328256][T13807] Node 0 DMA32: 1033*4kB (UME) 723*8kB (UME) 269*16kB (UM) 121*32kB (UME) 62*64kB (UME) 130*128kB (UM) 103*256kB (UM) 58*512kB (UM) 20*1024kB (UM) 5*2048kB (U) 1*4096kB (U) = 129580kB [ 239.336102][T13807] Node 1 Normal: 403*4kB (UME) 406*8kB (UME) 375*16kB (UME) 347*32kB (UME) 354*64kB (UME) 305*128kB (UME) 256*256kB (UM) 174*512kB (UME) 125*1024kB (UM) 27*2048kB (UME) 295*4096kB (UM) = 1629900kB [ 239.358891][T13807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.365070][T13807] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 239.369792][T13807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.372906][T13807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 239.375871][T13807] 47476 total pagecache pages [ 239.377676][T13807] 5 pages in swap cache [ 239.379048][T13807] Free swap = 123736kB [ 239.380436][T13807] Total swap = 124996kB [ 239.381829][T13807] 1048443 pages RAM [ 239.383110][T13807] 0 pages HighMem/MovableOnly [ 239.384646][T13807] 285300 pages reserved [ 239.386045][T13807] 0 pages cma reserved [ 239.425806][T13824] cdrom: dropping to single frame dma [ 239.549114][T13824] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 239.779709][T13861] netlink: 'syz.3.2442': attribute type 63 has an invalid length. [ 239.782360][T13861] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2442'. [ 239.785172][T13861] gretap0: entered allmulticast mode [ 239.789597][T13861] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 239.803141][T13858] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 239.816616][T13858] tmpfs: Group quota inode hardlimit too large. [ 240.018342][T13863] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 240.021608][T13863] /dev/nullb0: Can't open blockdev [ 240.027093][ T9481] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 240.125105][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 240.178653][ T9481] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.189572][ T9481] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.194937][ T9481] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.206331][ T9481] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.218236][T13859] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 240.225441][ T9481] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.225488][T13885] bridge0: port 3(syz_tun) entered blocking state [ 240.242766][T13885] bridge0: port 3(syz_tun) entered disabled state [ 240.247991][T13885] syz_tun: entered allmulticast mode [ 240.282851][T13885] syz_tun: entered promiscuous mode [ 240.296796][T13885] bridge0: port 3(syz_tun) entered blocking state [ 240.299668][T13885] bridge0: port 3(syz_tun) entered forwarding state [ 240.549136][ T9481] usb 13-1: USB disconnect, device number 3 [ 240.698772][T13899] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 240.740514][T13904] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 240.741393][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 240.744405][T13904] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 240.756804][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 240.919853][ T7698] IPVS: starting estimator thread 0... [ 241.007130][T13914] IPVS: using max 42 ests per chain, 100800 per kthread [ 241.135386][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2456'. [ 241.159535][T13925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2457'. [ 241.221719][T13925] team0 (unregistering): Port device team_slave_0 removed [ 241.243880][T13925] team0 (unregistering): Port device team_slave_1 removed [ 241.258566][T13927] macvtap1: entered promiscuous mode [ 241.358309][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2462'. [ 241.363768][T13940] netlink: 'syz.8.2462': attribute type 1 has an invalid length. [ 241.383872][ T5732] Bluetooth: hci1: Malformed Event: 0x13 [ 241.446338][T13956] Bluetooth: MGMT ver 1.23 [ 241.462015][T13953] binder: BINDER_SET_CONTEXT_MGR already set [ 241.464635][T13953] binder: 13951:13953 ioctl 4018620d 2000000000c0 returned -16 [ 241.468675][T13954] binder: 13951:13954 unknown command 0 [ 241.470395][T13954] binder: 13951:13954 ioctl c0306201 2000000003c0 returned -22 [ 241.479584][T13956] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 241.662516][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 241.673156][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 242.023924][T13986] bond1: ARP target 9.0.0.0 is already present [ 242.029125][T13986] bond1: option arp_ip_target: invalid value (9) [ 242.040585][T13986] bond1 (unregistering): Released all slaves [ 242.139463][T13993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2475'. [ 242.180304][T13994] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 242.199344][T13994] bond3 (unregistering): Released all slaves [ 242.384546][T14002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14002 comm=syz.3.2478 [ 242.417485][T14004] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 242.422661][T14004] overlayfs: missing 'lowerdir' [ 242.427998][T14004] MTDSB: Device #1 doesn't appear to exist [ 242.427998][T14004] [ 242.565742][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 242.565765][ T42] audit: type=1400 audit(1786251898.624:1372): avc: denied { write } for pid=14011 comm="syz.7.2482" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 242.571841][T14012] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 242.585573][ T42] audit: type=1400 audit(1786251898.644:1373): avc: denied { ioctl } for pid=14011 comm="syz.7.2482" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 242.629842][ T42] audit: type=1400 audit(1786251898.694:1374): avc: denied { write } for pid=14013 comm="syz.7.2483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.700496][ T42] audit: type=1400 audit(1786251898.764:1375): avc: denied { write } for pid=14013 comm="syz.7.2483" name="dbroot" dev="configfs" ino=53255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 242.719007][ T42] audit: type=1400 audit(1786251898.764:1376): avc: denied { open } for pid=14013 comm="syz.7.2483" path="/159/my_configfs/target/dbroot" dev="configfs" ino=53255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 242.733626][ T42] audit: type=1400 audit(1786251898.764:1377): avc: denied { write } for pid=14013 comm="syz.7.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.755505][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.803563][ T42] audit: type=1400 audit(1786251898.864:1378): avc: denied { listen } for pid=14019 comm="syz.7.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.811931][ T42] audit: type=1400 audit(1786251898.884:1379): avc: denied { accept } for pid=14019 comm="syz.7.2485" lport=42023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.823031][ T42] audit: type=1400 audit(1786251898.884:1380): avc: denied { connect } for pid=14018 comm="syz.8.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.845226][ T42] audit: type=1400 audit(1786251898.904:1381): avc: denied { create } for pid=14018 comm="syz.8.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.154591][T14044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.226478][T14039] SELinux: failed to load policy [ 243.435476][T14051] netlink: 'syz.8.2496': attribute type 1 has an invalid length. [ 243.438350][T14051] netlink: 'syz.8.2496': attribute type 4 has an invalid length. [ 243.770355][T14065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.084713][T14081] syzkaller1: entered promiscuous mode [ 244.090627][T14081] syzkaller1: entered allmulticast mode [ 244.288635][T14089] 9p: Bad value for 'rfdno' [ 244.655421][T14110] scsi_strcpy_devinfo: vendor string 'vendo€â*r' is too long [ 244.661141][T14110] scsi_strcpy_devinfo: model string 'moí劌r•™—˜r³ádel' is too long [ 244.664751][T14113] netlink: 'syz.8.2516': attribute type 1 has an invalid length. [ 244.685821][T14108] gadgetfs: bound to dummy_udc driver [ 244.688466][T14113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.743447][T14113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.745847][T14113] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 244.758645][T14113] bond1: (slave vti0): Error -95 calling set_mac_address [ 244.773075][T14118] evm: overlay not supported [ 244.801776][T14118] 9pnet_virtio: no channels available for device syz [ 244.920241][T14127] __nla_validate_parse: 8 callbacks suppressed [ 244.920261][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2519'. [ 244.927478][T14127] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.173517][T14138] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 245.175509][T14138] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 245.178496][T14138] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 245.188820][T14138] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 245.222280][T14147] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.330725][T14138] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 245.341060][T14138] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 245.361147][T14138] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 245.399217][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2525'. [ 245.406593][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2525'. [ 246.016276][T14171] netlink: 'syz.8.2530': attribute type 1 has an invalid length. [ 246.054259][T14171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.069477][T14171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.073290][T14171] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 246.080017][T14171] bond2: (slave vti0): Error -95 calling set_mac_address [ 246.303465][T14179] nvmet: adding nsid 1 to subsystem testnqn [ 246.356231][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2536'. [ 246.360801][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2536'. [ 246.365748][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2536'. [ 246.375393][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2536'. [ 246.386263][T14184] netlink: 'syz.8.2536': attribute type 1 has an invalid length. [ 246.693811][T14219] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 246.714742][T14219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.966019][T14246] loop5: detected capacity change from 0 to 7 [ 249.971816][T14246] Dev loop5: unable to read RDB block 7 [ 249.974011][T14246] loop5: AHDI p2 [ 249.976758][T14243] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 249.978604][T14246] loop5: partition table partially beyond EOD, truncated [ 250.065251][T14252] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 250.119481][T14252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.253135][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 250.253156][ T42] audit: type=1400 audit(1786251906.314:1421): avc: denied { setopt } for pid=14259 comm="syz.3.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 250.266659][ T55] bridge0: entered promiscuous mode [ 250.339418][ T42] audit: type=1400 audit(1786251906.404:1422): avc: denied { watch } for pid=14261 comm="syz.7.2557" path="/191/file0" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.346624][ T42] audit: type=1400 audit(1786251906.404:1423): avc: denied { watch_sb watch_reads } for pid=14261 comm="syz.7.2557" path="/191/file0" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.567333][ T42] audit: type=1400 audit(1786251906.624:1424): avc: denied { setopt } for pid=14264 comm="syz.8.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.626128][ T42] audit: type=1400 audit(1786251906.684:1425): avc: denied { write } for pid=14279 comm="syz.7.2563" name="functions" dev="configfs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.647209][ T42] audit: type=1400 audit(1786251906.704:1426): avc: denied { write } for pid=14279 comm="syz.7.2563" name="functions" dev="configfs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.793751][ T42] audit: type=1400 audit(1786251906.854:1427): avc: denied { create } for pid=14285 comm="syz.3.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.807429][ T42] audit: type=1400 audit(1786251906.874:1428): avc: denied { ioctl } for pid=14285 comm="syz.3.2565" path="socket:[56395]" dev="sockfs" ino=56395 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.832598][ T42] audit: type=1400 audit(1786251906.894:1429): avc: denied { execute } for pid=14288 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 250.849404][ T42] audit: type=1400 audit(1786251906.914:1430): avc: denied { accept } for pid=14285 comm="syz.3.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.875413][T14290] loop0: detected capacity change from 0 to 8 [ 250.932591][T14290] block2mtd: erasesize must be a divisor of device size [ 251.031340][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.044903][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.054152][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.062300][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.066000][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.168893][T14306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input37 [ 251.262184][T14313] loop5: detected capacity change from 0 to 7 [ 251.273729][T14313] Dev loop5: unable to read RDB block 7 [ 251.278750][T14313] loop5: AHDI p2 [ 251.281760][T14313] loop5: partition table partially beyond EOD, truncated [ 251.519437][T14322] sctp: [Deprecated]: syz.8.2574 (pid 14322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.519437][T14322] Use struct sctp_sack_info instead [ 251.642254][T14327] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2576'. [ 251.650721][T14327] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2576'. [ 252.103012][T14337] netlink: 'syz.7.2579': attribute type 21 has an invalid length. [ 252.221564][T12175] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.229168][T12175] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.306455][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.321064][T14344] loop5: detected capacity change from 0 to 7 [ 252.328935][T14297] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.331866][T14297] bridge_slave_0: entered allmulticast mode [ 252.332444][T14344] Dev loop5: unable to read RDB block 7 [ 252.335443][T14297] bridge_slave_0: entered promiscuous mode [ 252.342670][T14344] loop5: AHDI p2 [ 252.351492][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.353707][T14344] loop5: partition table partially beyond EOD, truncated [ 252.359462][T14297] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.362605][T14297] bridge_slave_1: entered allmulticast mode [ 252.365893][T14297] bridge_slave_1: entered promiscuous mode [ 252.418790][T12175] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.431168][T12175] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.486223][T14297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.488080][T14297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.504437][T14297] team0: Port device team_slave_0 added [ 252.508601][T14297] team0: Port device team_slave_1 added [ 252.533064][T12175] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.533105][T12175] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.553502][T14297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.553515][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.553530][T14297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.554417][T14297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.554426][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.554441][T14297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.613701][T14297] hsr_slave_0: entered promiscuous mode [ 252.614542][T14297] hsr_slave_1: entered promiscuous mode [ 252.615425][T14297] debugfs: 'hsr0' already exists in 'hsr' [ 252.615445][T14297] Cannot create hsr debugfs directory [ 252.836017][T12175] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.843770][T12175] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 253.108006][ T5084] Bluetooth: hci4: command tx timeout [ 253.155993][T14297] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 253.160221][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.165442][T14297] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 253.187875][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.196021][T14297] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 253.207267][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.212136][T14297] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 253.218800][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.747624][T12175] bond3 (unregistering): (slave geneve3): Releasing active interface [ 253.763528][T12175] bond2 (unregistering): (slave geneve2): Releasing active interface [ 253.790767][T12175] bond0 (unregistering): Released all slaves [ 253.795536][T12175] bond1 (unregistering): Released all slaves [ 253.805279][T12175] bond2 (unregistering): Released all slaves [ 253.815429][T12175] bond3 (unregistering): Released all slaves [ 253.855572][ T5437] 8021q: adding VLAN 0 to HW filter on device eth22 [ 253.881017][T14373] ipvlan2: entered allmulticast mode [ 253.887277][T14373] batadv_slave_1: entered allmulticast mode [ 253.910828][T14373] batman_adv: batadv0: Adding interface: ipvlan2 [ 253.915153][T14373] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.929596][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.937557][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.941367][T14373] batman_adv: batadv0: Interface activated: ipvlan2 [ 253.974384][T12175] tipc: Disabling bearer [ 253.992260][T12175] tipc: Left network mode [ 254.007223][ T13] netdevsim netdevsim5 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.012007][ T13] netdevsim netdevsim5 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.024074][ T13] netdevsim netdevsim5 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.069152][ T5804] netdevsim netdevsim5 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.083346][T14380] loop5: detected capacity change from 0 to 7 [ 254.090331][T14380] Dev loop5: unable to read RDB block 7 [ 254.092637][T14380] loop5: AHDI p2 [ 254.094073][T14380] loop5: partition table partially beyond EOD, truncated [ 254.202585][T14297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.229387][T14388] tipc: Cannot configure node identity twice [ 254.242286][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2590'. [ 254.243536][T14297] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.252451][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.254803][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.310928][T12175] hsr_slave_0: left promiscuous mode [ 254.313935][T12175] hsr_slave_1: left promiscuous mode [ 254.331579][T12175] veth1_macvtap: left promiscuous mode [ 254.336331][T12175] veth0_macvtap: left promiscuous mode [ 254.343454][T12175] veth1_vlan: left promiscuous mode [ 254.346541][T12175] veth0_vlan: left promiscuous mode [ 254.371539][T14397] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 254.656576][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.659478][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.666612][ T5437] 8021q: adding VLAN 0 to HW filter on device eth23 [ 254.821966][T14413] cgroup: No subsys list or none specified [ 254.899647][T14421] loop5: detected capacity change from 0 to 7 [ 254.911954][T14421] Dev loop5: unable to read RDB block 7 [ 254.914394][T14421] loop5: AHDI p2 [ 254.916147][T14421] loop5: partition table partially beyond EOD, truncated [ 254.928455][T14424] syzkaller1: entered promiscuous mode [ 254.930296][T14424] syzkaller1: entered allmulticast mode [ 255.086362][ T5437] 8021q: adding VLAN 0 to HW filter on device eth24 [ 255.152357][T12175] IPVS: stop unused estimator thread 0... [ 255.187250][ T5084] Bluetooth: hci4: command tx timeout [ 255.189609][T14445] Mount JFS Failure: -22 [ 255.196067][T14445] jfs_mount failed w/return code = -22 [ 255.326004][T14297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.333673][ T42] kauditd_printk_skb: 19886 callbacks suppressed [ 255.333686][ T42] audit: type=1400 audit(1786251911.394:21317): avc: denied { write } for pid=14456 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.405659][T14462] Bluetooth: hci2: Frame reassembly failed (-84) [ 255.417649][ T5437] 8021q: adding VLAN 0 to HW filter on device eth25 [ 255.441052][ T9116] Bluetooth: hci2: Frame reassembly failed (-84) [ 255.459551][T14465] loop5: detected capacity change from 0 to 7 [ 255.464188][T14465] Dev loop5: unable to read RDB block 7 [ 255.466570][T14465] loop5: AHDI p2 [ 255.468489][T14465] loop5: partition table partially beyond EOD, truncated [ 255.589449][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.592088][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653425][T14297] veth0_vlan: entered promiscuous mode [ 255.686995][T14297] veth1_vlan: entered promiscuous mode [ 255.713654][T14297] veth0_macvtap: entered promiscuous mode [ 255.722103][T14297] veth1_macvtap: entered promiscuous mode [ 255.740885][T14297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.747817][T14297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.766863][T14482] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 255.869394][T12175] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.874877][T12175] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.881171][T12175] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.886458][T12175] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.901684][T14482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2609'. [ 255.927354][ T9112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.929848][ T9112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.981297][ T9116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.983793][ T9116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.996324][ T42] audit: type=1400 audit(1786251912.054:21318): avc: denied { mounton } for pid=14297 comm="syz-executor" path="/syzkaller.LyxcLq/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 256.006758][ T42] audit: type=1400 audit(1786251912.054:21319): avc: denied { shutdown } for pid=14483 comm="syz.7.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.016154][ T42] audit: type=1400 audit(1786251912.054:21320): avc: denied { mounton } for pid=14297 comm="syz-executor" path="/syzkaller.LyxcLq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 256.025316][ T42] audit: type=1400 audit(1786251912.054:21321): avc: denied { mounton } for pid=14297 comm="syz-executor" path="/syzkaller.LyxcLq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 256.036366][ T42] audit: type=1400 audit(1786251912.074:21322): avc: denied { mounton } for pid=14297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 256.046844][ T42] audit: type=1400 audit(1786251912.084:21323): avc: denied { mounton } for pid=14297 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 256.075808][T14494] SELinux: policydb magic number 0x6837c8d2 does not match expected magic number 0xf97cff8c [ 256.079358][T14494] SELinux: failed to load policy [ 256.149457][ T42] audit: type=1400 audit(1786251912.214:21324): avc: denied { mount } for pid=14495 comm="syz.9.2612" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 256.249705][T14502] loop5: detected capacity change from 0 to 7 [ 256.253812][T14502] Dev loop5: unable to read RDB block 7 [ 256.256308][T14502] loop5: AHDI p2 [ 256.258285][T14502] loop5: partition table partially beyond EOD, truncated [ 256.922449][ T42] audit: type=1400 audit(1786251912.984:21325): avc: denied { read write } for pid=14519 comm="syz.3.2619" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 256.931705][ T42] audit: type=1400 audit(1786251912.984:21326): avc: denied { open } for pid=14519 comm="syz.3.2619" path="/117/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 257.160706][T14528] netlink: 'syz.9.2621': attribute type 1 has an invalid length. [ 257.172549][T14528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.267186][ T5732] Bluetooth: hci4: command tx timeout [ 257.298418][T14536] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 257.345073][T14538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.431345][T14542] loop5: detected capacity change from 0 to 7 [ 257.433204][ T5732] Bluetooth: hci2: command 0x1003 tx timeout [ 257.434150][ T5084] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 257.437030][T14542] Dev loop5: unable to read RDB block 7 [ 257.447901][T14542] loop5: AHDI p2 [ 257.451626][T14542] loop5: partition table partially beyond EOD, truncated [ 257.490009][T14544] jffs2: notice: (14544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 257.674850][T14554] binder: BINDER_SET_CONTEXT_MGR already set [ 257.676868][T14554] binder: 14553:14554 ioctl 4018620d 200000000100 returned -16 [ 257.948050][T14574] loop5: detected capacity change from 0 to 7 [ 257.952940][T14574] Dev loop5: unable to read RDB block 7 [ 257.954680][T14574] loop5: AHDI p2 [ 257.955930][T14574] loop5: partition table partially beyond EOD, truncated [ 257.994442][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2638'. [ 258.008020][ T5084] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 258.091611][T14579] raw_sendmsg: syz.8.2639 forgot to set AF_INET. Fix it! [ 258.213328][T14587] jffs2: notice: (14587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 258.341491][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 258.345371][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 258.437766][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2642'. [ 258.572043][T14596] loop9: detected capacity change from 0 to 255852544 [ 258.632937][T14596] Invalid logical block size (4) [ 258.833437][T14602] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 258.840813][T14490] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 258.847993][T14602] VFS: Can't find a romfs filesystem on dev nullb0. [ 258.847993][T14602] [ 258.981719][T14611] loop5: detected capacity change from 0 to 7 [ 258.999551][T14611] Dev loop5: unable to read RDB block 7 [ 259.004176][T14611] loop5: AHDI p2 [ 259.005729][T14611] loop5: partition table partially beyond EOD, truncated [ 259.199862][T14622] vlan1: entered promiscuous mode [ 259.303898][T14626] netlink: 'syz.8.2653': attribute type 1 has an invalid length. [ 259.357366][ T5084] Bluetooth: hci4: command tx timeout [ 259.475038][T14627] bridge0: port 3(syz_tun) entered disabled state [ 259.528879][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.532031][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.749319][T14627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.770932][T14627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.926865][T12175] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.936318][T12175] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.941511][T12175] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.946783][T12175] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.986859][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 260.198034][T14656] netlink: 'syz.9.2662': attribute type 1 has an invalid length. [ 260.555314][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 260.555328][ T42] audit: type=1400 audit(1786252172.623:21353): avc: denied { getopt } for pid=14681 comm="syz.3.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 260.604972][ T42] audit: type=1400 audit(1786252172.673:21354): avc: denied { ioctl } for pid=14683 comm="syz.9.2671" path="socket:[59441]" dev="sockfs" ino=59441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.614118][T14691] loop5: detected capacity change from 0 to 7 [ 260.615247][T14684] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2671'. [ 260.619625][T14691] Dev loop5: unable to read RDB block 7 [ 260.621575][T14691] loop5: AHDI p2 [ 260.622872][T14691] loop5: partition table partially beyond EOD, truncated [ 260.671256][ T42] audit: type=1400 audit(1786252172.743:21355): avc: denied { create } for pid=14694 comm="syz.7.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 260.688171][ T42] audit: type=1400 audit(1786252172.753:21356): avc: denied { sys_admin } for pid=14694 comm="syz.7.2674" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 260.690557][T14696] VFS: Mount too revealing [ 260.801235][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2677'. [ 260.814090][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2677'. [ 260.855984][T14709] netlink: 'syz.3.2679': attribute type 4 has an invalid length. [ 260.946726][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.949887][T14713] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2680'. [ 260.989925][T14718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.087989][ T42] audit: type=1400 audit(1786252173.163:21357): avc: denied { create } for pid=14720 comm="syz.9.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 261.130935][T14725] loop5: detected capacity change from 0 to 7 [ 261.136457][T14725] Dev loop5: unable to read RDB block 7 [ 261.138464][T14725] loop5: AHDI p2 [ 261.142347][T14725] loop5: partition table partially beyond EOD, truncated [ 261.348637][ T42] audit: type=1400 audit(1786252173.423:21358): avc: denied { map } for pid=14736 comm="syz.9.2689" path="socket:[59491]" dev="sockfs" ino=59491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 261.358625][T14737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62616 sclass=netlink_route_socket pid=14737 comm=syz.9.2689 [ 261.375956][T14718] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 261.394278][T14718] overlayfs: failed to look up (tracing) for ino (-66) [ 261.489826][T14747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2688'. [ 261.530814][ T42] audit: type=1400 audit(1786252173.603:21359): avc: denied { mounton } for pid=14754 comm="syz.8.2693" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.540397][T14757] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 261.600642][T14761] loop5: detected capacity change from 0 to 7 [ 261.604112][T14761] Dev loop5: unable to read RDB block 7 [ 261.606998][T14761] loop5: AHDI p2 [ 261.608640][T14761] loop5: partition table partially beyond EOD, truncated [ 261.618322][T14759] CIFS mount error: No usable UNC path provided in device string! [ 261.618322][T14759] [ 261.640668][T14759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 261.844110][T14768] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2696'. [ 262.171603][T14793] loop5: detected capacity change from 0 to 7 [ 262.173936][T14793] Dev loop5: unable to read RDB block 7 [ 262.175653][T14793] loop5: AHDI p2 [ 262.179286][T14793] loop5: partition table partially beyond EOD, truncated [ 262.289818][ T42] audit: type=1400 audit(1786252174.363:21360): avc: denied { ioctl } for pid=14798 comm="syz.9.2706" path="socket:[59643]" dev="sockfs" ino=59643 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.389552][ T5084] Bluetooth: hci4: command tx timeout [ 262.540367][ T42] audit: type=1800 audit(1786252174.613:21361): pid=14797 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2705" name="/" dev="fuse" ino=1 res=0 errno=0 [ 262.560467][ T42] audit: type=1400 audit(1786252174.623:21362): avc: denied { nlmsg_read } for pid=14817 comm="syz.9.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.713835][T14820] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.716349][T14820] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.752832][T14830] overlay: ./sys/block/loop0/make-it-fail is not a directory [ 262.761450][T14820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.767903][T14820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.836531][T12175] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.841914][T12175] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.845887][T12175] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.856423][T12175] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.973343][T14837] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.118277][T14841] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 263.160378][T14844] __nla_validate_parse: 2 callbacks suppressed [ 263.160392][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2720'. [ 263.336927][T14853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 263.351236][T14853] block2mtd: erasesize must be a divisor of device size [ 263.497232][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.499812][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.502119][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.504344][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.508550][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.510957][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.513673][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.515893][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.518525][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.520593][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.522671][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.524804][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.527390][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.529997][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.532283][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.534996][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.538722][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.541609][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.544317][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.547923][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.550964][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.553775][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.556231][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.559279][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.561617][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.564370][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.566582][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.569119][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.571486][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.574530][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.578336][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.581337][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.584473][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.587426][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.590238][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.593016][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.595255][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.597887][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.600572][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.603272][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.606069][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.609028][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.611315][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.614152][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.616498][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.618683][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.620823][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.623014][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.625158][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.627432][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.629474][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.631532][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.634215][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.636395][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.638475][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.641049][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.643756][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.646455][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.649253][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.651984][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.654508][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.657251][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.660005][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.665426][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.668532][ T5084] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 263.695519][T14869] CIFS mount error: No usable UNC path provided in device string! [ 263.695519][T14869] [ 263.698991][T14869] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 263.744774][T14871] netlink: 'syz.9.2729': attribute type 1 has an invalid length. [ 263.764734][T14871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.808436][T14876] zram: Cannot change disksize for initialized device [ 263.887030][T14880] loop5: detected capacity change from 0 to 7 [ 263.892361][T14880] Dev loop5: unable to read RDB block 7 [ 263.894440][T14880] loop5: AHDI p2 [ 263.895637][T14880] loop5: partition table partially beyond EOD, truncated [ 264.025080][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2734'. [ 264.049694][T14890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.102432][T14893] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 264.105100][T14893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.109256][T14893] vhci_hcd vhci_hcd.0: Device attached [ 264.118509][T14893] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 264.121234][T14893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.124546][T14893] vhci_hcd vhci_hcd.0: Device attached [ 264.128320][T14896] vhci_hcd: connection closed [ 264.130076][T14894] vhci_hcd: connection closed [ 264.134365][ T5813] vhci_hcd vhci_hcd.9: stop threads [ 264.143002][ T5813] vhci_hcd vhci_hcd.9: release socket [ 264.145430][ T5813] vhci_hcd vhci_hcd.9: disconnect device [ 264.153289][ T5813] vhci_hcd vhci_hcd.9: stop threads [ 264.155577][ T5813] vhci_hcd vhci_hcd.9: release socket [ 264.158440][ T5813] vhci_hcd vhci_hcd.9: disconnect device [ 264.476276][ T5084] Bluetooth: hci4: command tx timeout [ 264.608046][T14904] x_tables: duplicate underflow at hook 2 [ 264.660755][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.664832][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.720061][T14912] zram: Cannot change disksize for initialized device [ 264.762676][T14914] ipt_ECN: cannot use operation on non-tcp rule [ 264.776654][T14918] loop5: detected capacity change from 0 to 7 [ 264.783425][T14918] Dev loop5: unable to read RDB block 7 [ 264.785249][T14918] loop5: AHDI p2 [ 264.790199][T14918] loop5: partition table partially beyond EOD, truncated [ 265.033331][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 265.079932][T14935] 9pnet_virtio: no channels available for device syz [ 265.088734][T14935] SELinux: policydb magic number 0xf9007039 does not match expected magic number 0xf97cff8c [ 265.094046][T14935] SELinux: failed to load policy [ 265.159746][T14943] afs: Unknown parameter '[î-Šö;)sÌ[a?flock' [ 265.280527][T14950] netlink: 'syz.7.2757': attribute type 1 has an invalid length. [ 265.334881][T14950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.363021][T14958] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2758'. [ 265.372484][T14956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.375599][T14956] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 265.381728][T14956] bond2: (slave vti0): Error -95 calling set_mac_address [ 265.425644][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.573324][T14966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 265.579139][T14966] nbd: illegal input index 67111936 [ 265.634214][T14970] loop5: detected capacity change from 0 to 7 [ 265.639953][T14970] Dev loop5: unable to read RDB block 7 [ 265.642411][T14970] loop5: AHDI p2 [ 265.643980][T14970] loop5: partition table partially beyond EOD, truncated [ 265.718237][T14974] gretap1: entered promiscuous mode [ 265.722563][T14974] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 265.793831][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 265.793882][ T42] audit: type=1400 audit(1786252177.854:21376): avc: denied { read } for pid=14978 comm="syz.3.2767" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.808568][ T42] audit: type=1400 audit(1786252177.854:21377): avc: denied { open } for pid=14978 comm="syz.3.2767" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.842857][T14981] zram: Cannot change disksize for initialized device [ 265.992769][ T42] audit: type=1400 audit(1786252178.054:21378): avc: denied { write } for pid=14985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.044492][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 266.061627][ T42] audit: type=1400 audit(1786252178.124:21379): avc: denied { write } for pid=14993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.078221][T14995] netlink: 'syz.3.2773': attribute type 8 has an invalid length. [ 266.081911][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 266.089394][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 266.232452][T15013] zram: Cannot change disksize for initialized device [ 266.297596][T15017] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 266.312304][T15017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.325178][T15019] fuse: root generation should be zero [ 266.345735][T15015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.358272][T15021] zram: Cannot change disksize for initialized device [ 266.463081][T15032] openvswitch: netlink: IPv4 tunnel dst address is zero [ 266.465263][T15032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.469141][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 266.486932][T15036] loop5: detected capacity change from 0 to 7 [ 266.489525][T15036] Dev loop5: unable to read RDB block 7 [ 266.491214][T15036] loop5: AHDI p2 [ 266.492987][T15036] loop5: partition table partially beyond EOD, truncated [ 266.497004][T15038] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2785'. [ 266.499886][T15038] block nbd0: not configured, cannot reconfigure [ 266.546725][ T5084] Bluetooth: hci4: command tx timeout [ 266.596642][T15045] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 266.610793][T15045] bond6: (slave sit1): Error -95 calling set_mac_address [ 266.654220][ T42] audit: type=1400 audit(1786252178.714:21380): avc: denied { write } for pid=15046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.739976][T15056] zram: Cannot change disksize for initialized device [ 266.760588][ T42] audit: type=1400 audit(1786252178.834:21381): avc: denied { write } for pid=15054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.786270][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.844146][ T42] audit: type=1400 audit(1786252178.904:21382): avc: denied { append } for pid=15066 comm="syz.9.2794" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 266.862064][T15068] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 266.869500][T15068] SELinux: failed to load policy [ 266.908078][ T42] audit: type=1400 audit(1786252178.974:21383): avc: denied { write } for pid=15069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.961748][ T42] audit: type=1400 audit(1786252179.024:21384): avc: denied { write } for pid=15075 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.974100][ T5084] Bluetooth: hci3: unexpected event for opcode 0x040d [ 267.037057][T15081] loop5: detected capacity change from 0 to 7 [ 267.050129][T15081] Dev loop5: unable to read RDB block 7 [ 267.052528][T15081] loop5: AHDI p2 [ 267.054072][T15081] loop5: partition table partially beyond EOD, truncated [ 267.350685][ T42] audit: type=1400 audit(1786252179.414:21385): avc: denied { write } for pid=15082 comm="syz.3.2797" name="functions" dev="configfs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.350931][T15088] file system registered [ 267.501843][T15094] nbd: illegal input index 67111936 [ 267.583247][T15101] zram: Cannot change disksize for initialized device [ 267.625605][T15103] loop5: detected capacity change from 0 to 7 [ 267.631658][T15103] Dev loop5: unable to read RDB block 7 [ 267.635106][T15103] loop5: AHDI p2 [ 267.637037][T15103] loop5: partition table partially beyond EOD, truncated [ 267.674959][T15105] zram: Cannot change disksize for initialized device [ 267.691696][T15105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.816300][T15112] netlink: 'syz.7.2807': attribute type 10 has an invalid length. [ 267.824329][T15112] ipvlan0: entered allmulticast mode [ 267.835887][T15112] veth0_vlan: entered allmulticast mode [ 267.860668][T15112] team0: Device ipvlan0 failed to register rx_handler [ 267.968729][T15122] zram: Cannot change disksize for initialized device [ 268.071409][T15126] ip_vti0: entered promiscuous mode [ 268.075814][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 268.088169][T15127] nbd: illegal input index 67111936 [ 268.156115][T15130] zram: Cannot change disksize for initialized device [ 268.210600][T15135] loop5: detected capacity change from 0 to 7 [ 268.214608][T15135] Dev loop5: unable to read RDB block 7 [ 268.219027][T15135] loop5: AHDI p2 [ 268.220330][T15135] loop5: partition table partially beyond EOD, truncated [ 268.526501][T15151] zram: Cannot change disksize for initialized device [ 268.531091][T15151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.563559][T15153] vcan1: entered allmulticast mode [ 268.611794][T15156] netlink: 'syz.7.2821': attribute type 1 has an invalid length. [ 268.625837][ T5084] Bluetooth: hci4: command tx timeout [ 268.653647][T15163] __nla_validate_parse: 4 callbacks suppressed [ 268.653661][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2824'. [ 268.659041][T15156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.673239][T15156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.679316][T15156] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 268.683788][T15156] bond3: (slave vti0): Error -95 calling set_mac_address [ 268.933812][T15172] atomic_op ffff88804a40a198 conn xmit_atomic 0000000000000000 [ 268.988439][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2827'. [ 268.991216][T15178] nbd: illegal input index 67111936 [ 268.991226][T15179] loop5: detected capacity change from 0 to 7 [ 268.996994][T15179] Dev loop5: unable to read RDB block 7 [ 268.999417][T15179] loop5: AHDI p2 [ 269.001118][T15179] loop5: partition table partially beyond EOD, truncated [ 269.085020][T15184] netlink: 'syz.9.2829': attribute type 10 has an invalid length. [ 269.087745][T15184] ipvlan0: entered allmulticast mode [ 269.089485][T15184] veth0_vlan: entered allmulticast mode [ 269.094477][T15184] team0: Device ipvlan0 failed to register rx_handler [ 269.136431][T15188] zram: Cannot change disksize for initialized device [ 269.300893][T15199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2837'. [ 269.304755][T15199] nbd: illegal input index 67111936 [ 269.358961][ T5084] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 269.383892][T15205] zram: Cannot change disksize for initialized device [ 269.493015][T15211] netlink: 'syz.9.2842': attribute type 1 has an invalid length. [ 269.504802][T15211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.623283][T15216] netlink: 'syz.9.2843': attribute type 10 has an invalid length. [ 269.631819][T15216] team0: Device ipvlan0 failed to register rx_handler [ 269.633951][T15207] gfs2: gfs2 mount does not exist [ 269.760374][T15223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2846'. [ 269.763342][T15223] nbd: illegal input index 67111936 [ 269.995268][T15228] netlink: 'syz.8.2849': attribute type 7 has an invalid length. [ 270.071967][T15235] netlink: 'syz.9.2851': attribute type 1 has an invalid length. [ 270.122685][T15235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.145940][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 270.189297][T15239] zram: Cannot change disksize for initialized device [ 270.207990][T15241] loop5: detected capacity change from 0 to 7 [ 270.211740][T15241] Dev loop5: unable to read RDB block 7 [ 270.213815][T15241] loop5: AHDI p2 [ 270.215252][T15241] loop5: partition table partially beyond EOD, truncated [ 270.300494][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2855'. [ 270.303896][T15244] nbd: illegal input index 67111936 [ 270.454994][T15254] netlink: 'syz.9.2858': attribute type 10 has an invalid length. [ 270.460269][T15254] team0: Device ipvlan0 failed to register rx_handler [ 270.599718][T15256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.706026][ T5084] Bluetooth: hci4: command tx timeout [ 270.838364][T15274] netlink: 'syz.8.2864': attribute type 10 has an invalid length. [ 270.841392][T15274] ipvlan0: entered allmulticast mode [ 270.843401][T15274] veth0_vlan: entered allmulticast mode [ 270.848148][T15274] team0: Device ipvlan0 failed to register rx_handler [ 270.898936][T15277] loop5: detected capacity change from 0 to 7 [ 270.904562][T15277] Dev loop5: unable to read RDB block 7 [ 270.909912][T15277] loop5: AHDI p2 [ 270.911307][T15277] loop5: partition table partially beyond EOD, truncated [ 270.963255][T15278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.967565][T15278] batadv_slave_1: entered promiscuous mode [ 271.252947][T15289] zram: Cannot change disksize for initialized device [ 271.338078][T15293] CIFS: Attempting to mount //127.0.0.1/share [ 271.352546][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 271.352586][ T42] audit: type=1400 audit(1786252183.414:21393): avc: denied { bind } for pid=15294 comm="syz.8.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.373574][ T42] audit: type=1400 audit(1786252183.434:21394): avc: denied { wake_alarm } for pid=15296 comm="syz.3.2874" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.392035][T15295] XFS (nullb0): Invalid superblock magic number [ 271.423584][ T42] audit: type=1400 audit(1786252183.494:21395): avc: denied { write } for pid=15296 comm="syz.3.2874" name="functions" dev="configfs" ino=16591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.467638][ T42] audit: type=1400 audit(1786252183.534:21396): avc: denied { ioctl } for pid=15296 comm="syz.3.2874" path="/181/config/usb_gadget/g1/functions/uac1.usb0/c_chmask" dev="configfs" ino=65264 ioctlcmd=0x5325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 271.490668][ T42] audit: type=1400 audit(1786252183.534:21397): avc: denied { write } for pid=15296 comm="syz.3.2874" name="c.1" dev="configfs" ino=16596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.498019][ T42] audit: type=1400 audit(1786252183.534:21398): avc: denied { create } for pid=15296 comm="syz.3.2874" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 271.507334][ T42] audit: type=1400 audit(1786252183.534:21399): avc: denied { write } for pid=15296 comm="syz.3.2874" name="c.1" dev="configfs" ino=16596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.542557][T15309] netlink: 'syz.9.2875': attribute type 1 has an invalid length. [ 271.565133][T15309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.593164][T15317] zram: Cannot change disksize for initialized device [ 271.697896][T15323] netlink: 'syz.8.2879': attribute type 10 has an invalid length. [ 271.703788][T15323] team0: Device ipvlan0 failed to register rx_handler [ 272.007693][T15336] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 272.077924][T15343] zram: Cannot change disksize for initialized device [ 272.095307][T15345] loop5: detected capacity change from 0 to 7 [ 272.099321][T15345] Dev loop5: unable to read RDB block 7 [ 272.101857][T15345] loop5: AHDI p2 [ 272.103492][T15345] loop5: partition table partially beyond EOD, truncated [ 272.165359][T15293] CIFS: VFS: Error connecting to socket. Aborting operation. [ 272.165432][ T42] audit: type=1400 audit(1786252184.224:21400): avc: denied { write } for pid=15348 comm="syz.9.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.168654][T15293] CIFS: VFS: cifs_mount failed w/return code = -4 [ 272.174690][ T42] audit: type=1400 audit(1786252184.224:21401): avc: denied { read } for pid=15348 comm="syz.9.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.237690][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 272.414401][T15362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 272.430478][T15362] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2895'. [ 272.599896][T15367] zram: Cannot change disksize for initialized device [ 272.661213][T15371] Bluetooth: MGMT ver 1.23 [ 272.785499][ T5084] Bluetooth: hci4: command tx timeout [ 272.807365][ T42] audit: type=1400 audit(1786252184.874:21402): avc: denied { bind } for pid=15380 comm="syz.8.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.053934][T15390] »»»»»»: renamed from vlan0 [ 273.284228][T15404] netlink: 'syz.7.2911': attribute type 26 has an invalid length. [ 273.396516][T15417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2916'. [ 273.403306][T15417] bond0: (slave bond_slave_0): Releasing backup interface [ 273.453236][T15420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15420 comm=syz.3.2916 [ 273.487948][T15417] bond_slave_0: entered promiscuous mode [ 273.490795][T15417] bond_slave_0: entered allmulticast mode [ 273.523987][T15421] team0: Device ipvlan0 failed to register rx_handler [ 273.769180][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2922'. [ 274.235620][T15467] loop5: detected capacity change from 0 to 7 [ 274.240867][T15467] Dev loop5: unable to read RDB block 7 [ 274.243554][T15467] loop5: AHDI p2 [ 274.245466][T15467] loop5: partition table partially beyond EOD, truncated [ 274.305872][T15474] zram: Cannot change disksize for initialized device [ 274.374875][T15479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15479 comm=syz.3.2934 [ 274.386569][T15479] »»»»»»ÙÕ§p€ÑjÁ: renamed from vlan0 [ 274.398106][T15482] binder: 15480:15482 ioctl c0306201 0 returned -14 [ 274.461072][T15485] validate_nla: 4 callbacks suppressed [ 274.461092][T15485] netlink: 'syz.7.2936': attribute type 10 has an invalid length. [ 274.470168][T15485] team0: Device ipvlan0 failed to register rx_handler [ 274.628807][T15496] loop5: detected capacity change from 0 to 7 [ 274.648478][T15496] Dev loop5: unable to read RDB block 7 [ 274.649600][T15502] zram: Cannot change disksize for initialized device [ 274.651542][T15496] loop5: AHDI p2 [ 274.651566][T15496] loop5: partition table partially beyond EOD, truncated [ 274.873544][T15514] ±ÿ: renamed from lo (while UP) [ 274.876570][ T5084] Bluetooth: hci4: command tx timeout [ 274.885427][T15514] tmpfs: Bad value for 'mpol' [ 275.013983][T15528] netlink: 'syz.7.2952': attribute type 10 has an invalid length. [ 275.064562][T15528] team0: Device ipvlan0 failed to register rx_handler [ 275.071377][T15530] zram: Cannot change disksize for initialized device [ 275.259285][T15545] binder: 15544:15545 ioctl c0306201 200000000180 returned -14 [ 275.325597][T15553] netlink: 'syz.8.2964': attribute type 1 has an invalid length. [ 275.347740][T15555] zram: Cannot change disksize for initialized device [ 275.395830][T15560] x_tables: duplicate underflow at hook 1 [ 275.426056][ T5812] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 275.447105][T15566] loop5: detected capacity change from 0 to 7 [ 275.450177][T15566] Dev loop5: unable to read RDB block 7 [ 275.451982][T15566] loop5: AHDI p2 [ 275.453204][T15566] loop5: partition table partially beyond EOD, truncated [ 275.494989][ T9280] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 275.575677][ T5812] usb 12-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 275.581347][ T5812] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 275.589741][ T5812] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 275.595005][ T5812] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.611876][ T5812] usb 12-1: USB2VGA dongle found at address 4 [ 275.618539][ T5812] usb 12-1: Allocated 8 output buffers [ 275.644586][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'. [ 275.655769][ T9280] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.664662][ T9280] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.670317][ T9280] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.674394][ T9280] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.683327][T15539] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 275.693812][ T9280] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.708455][T15577] netlink: 'syz.8.2975': attribute type 1 has an invalid length. [ 275.725299][T15579] zram: Cannot change disksize for initialized device [ 275.836516][T15588] loop5: detected capacity change from 0 to 7 [ 275.840468][T15588] Dev loop5: unable to read RDB block 7 [ 275.843109][T15588] loop5: AHDI p2 [ 275.853216][T15588] loop5: partition table partially beyond EOD, truncated [ 275.994902][ T5084] Bluetooth: hci3: command 0x040f tx timeout [ 276.058446][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2983'. [ 276.066017][T15601] input: syz0 as /devices/virtual/input/input38 [ 276.092667][T15601] program syz.8.2983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.099127][T15601] tls_set_device_offload_rx: netdev not found [ 276.180586][ T7698] usb 14-1: USB disconnect, device number 2 [ 276.211285][T15605] netlink: 'syz.7.2984': attribute type 8 has an invalid length. [ 276.219383][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2984'. [ 276.230116][T15605] bond0: entered promiscuous mode [ 276.231896][T15605] bond_slave_0: entered promiscuous mode [ 276.234047][T15608] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 276.234216][T15605] bond_slave_1: entered promiscuous mode [ 276.246585][T15605] gretap0: entered promiscuous mode [ 276.249169][T15605] team0: entered promiscuous mode [ 276.250885][T15605] team_slave_0: entered promiscuous mode [ 276.253088][T15605] team_slave_1: entered promiscuous mode [ 276.260494][T15605] hsr1: entered promiscuous mode [ 276.279490][T15612] netlink: 'syz.8.2986': attribute type 1 has an invalid length. [ 276.312756][T15614] zram: Cannot change disksize for initialized device [ 276.319438][T15605] tmpfs: Bad value for 'mpol' [ 276.328511][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2984'. [ 276.348269][T15605] team_slave_0 (unregistering): left promiscuous mode [ 276.351274][T15605] team0: Port device team_slave_0 removed [ 276.384815][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 276.433534][T15621] loop5: detected capacity change from 0 to 7 [ 276.438448][T15621] Dev loop5: unable to read RDB block 7 [ 276.440902][T15621] loop5: AHDI p2 [ 276.442726][T15621] loop5: partition table partially beyond EOD, truncated [ 276.597741][T15628] netlink: 'syz.7.2992': attribute type 10 has an invalid length. [ 276.602763][T15628] team0: Device ipvlan0 failed to register rx_handler [ 276.724288][T15640] loop5: detected capacity change from 0 to 7 [ 276.727176][T15640] Dev loop5: unable to read RDB block 7 [ 276.728972][T15640] loop5: AHDI p2 [ 276.732528][T15640] loop5: partition table partially beyond EOD, truncated [ 276.785864][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.849756][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 276.849787][ T42] audit: type=1400 audit(1786252188.915:21418): avc: denied { mount } for pid=15647 comm="syz.9.3001" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 276.945400][ T5084] Bluetooth: hci4: command tx timeout [ 278.064728][ T5084] Bluetooth: hci3: command 0x040f tx timeout [ 278.474614][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 279.024669][ T5084] Bluetooth: hci4: command tx timeout [ 281.104622][ T5084] Bluetooth: hci4: command tx timeout [ 284.470531][ T42] audit: type=1400 audit(1786252196.536:21419): avc: denied { write } for pid=15660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.539034][ T42] audit: type=1400 audit(1786252196.606:21420): avc: denied { write } for pid=15663 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.367897][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 292.381394][T15675] input: syz1 as /devices/virtual/input/input39 [ 292.383982][T15675] input: failed to attach handler leds to device input39, error: -6 [ 292.427595][T15679] netlink: 'syz.3.3006': attribute type 10 has an invalid length. [ 292.442304][T15679] ipvlan0: entered allmulticast mode [ 292.445185][T15679] veth0_vlan: entered allmulticast mode [ 292.574976][T15697] loop5: detected capacity change from 0 to 7 [ 292.581866][T15697] Dev loop5: unable to read RDB block 7 [ 292.593320][T15697] loop5: AHDI p2 [ 292.595313][T15697] loop5: partition table partially beyond EOD, truncated [ 292.626103][T15694] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 292.645297][T15694] bond3 (unregistering): Released all slaves [ 292.695821][T15708] netlink: 'syz.9.3016': attribute type 10 has an invalid length. [ 292.714825][T15708] team0: Device ipvlan0 failed to register rx_handler [ 292.910787][ T42] audit: type=1400 audit(1786252204.977:21421): avc: denied { setattr } for pid=15730 comm="syz.3.3027" name="AF_VSOCK" dev="sockfs" ino=66196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 292.913312][T15729] loop5: detected capacity change from 0 to 7 [ 292.935018][T15729] Dev loop5: unable to read RDB block 7 [ 292.945903][T15729] loop5: AHDI p2 [ 292.956451][T15729] loop5: partition table partially beyond EOD, truncated [ 292.961671][ T42] audit: type=1400 audit(1786252205.027:21422): avc: denied { unmount } for pid=11972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 293.008423][T15743] jffs2: notice: (15743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 293.021526][T15744] netlink: 'syz.8.3029': attribute type 10 has an invalid length. [ 293.033569][T15737] vlan0: entered promiscuous mode [ 293.050025][T15744] team0: Device ipvlan0 failed to register rx_handler [ 293.053753][ T42] audit: type=1400 audit(1786252205.127:21423): avc: denied { connect } for pid=15747 comm="syz.7.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.104673][ T42] audit: type=1400 audit(1786252205.177:21424): avc: denied { write } for pid=15747 comm="syz.7.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.177511][ T42] audit: type=1400 audit(1786252205.247:21425): avc: denied { unlink } for pid=14297 comm="syz-executor" name="test" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.184665][ T42] audit: type=1400 audit(1786252205.247:21426): avc: denied { create } for pid=14297 comm="syz-executor" name="#3e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.196266][ T42] audit: type=1400 audit(1786252205.247:21427): avc: denied { link } for pid=14297 comm="syz-executor" name="#3e" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.201603][T15759] program syz.3.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.203973][ T42] audit: type=1400 audit(1786252205.247:21428): avc: denied { rename } for pid=14297 comm="syz-executor" name="#3f" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.214962][ T42] audit: type=1400 audit(1786252205.267:21429): avc: denied { write } for pid=15757 comm="syz.3.3035" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.221527][ T42] audit: type=1400 audit(1786252205.267:21430): avc: denied { remove_name } for pid=15757 comm="syz.3.3035" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.315196][T15772] loop5: detected capacity change from 0 to 7 [ 293.319888][T15772] Dev loop5: unable to read RDB block 7 [ 293.322159][T15769] can0: slcan on ttynull. [ 293.322905][T15772] loop5: AHDI p2 [ 293.328252][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3039'. [ 293.336594][T15772] loop5: partition table partially beyond EOD, truncated [ 293.423457][T15778] netlink: 'syz.7.3042': attribute type 10 has an invalid length. [ 293.481502][T15778] team0: Device ipvlan0 failed to register rx_handler [ 293.762498][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.763029][T15806] loop5: detected capacity change from 0 to 7 [ 293.776481][ T5732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.780688][T15806] Dev loop5: unable to read RDB block 7 [ 293.781198][ T5732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.788719][T15806] loop5: AHDI p2 [ 293.790338][T15806] loop5: partition table partially beyond EOD, truncated [ 293.802931][ T5732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.807425][ T5732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.910058][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 293.968444][T15824] netlink: 'syz.3.3055': attribute type 10 has an invalid length. [ 294.107046][ T13] bridge_slave_1: left allmulticast mode [ 294.108849][ T13] bridge_slave_1: left promiscuous mode [ 294.112071][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.135905][ T13] bridge_slave_0: left allmulticast mode [ 294.137768][ T13] bridge_slave_0: left promiscuous mode [ 294.139801][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.218815][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.222448][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.226045][ T13] bond0 (unregistering): Released all slaves [ 294.230824][ T13] bond1 (unregistering): Released all slaves [ 294.238120][ T13] bond2 (unregistering): Released all slaves [ 294.251818][ T13] bond3 (unregistering): Released all slaves [ 294.261024][ T13] bond4 (unregistering): Released all slaves [ 294.268153][ T13] bond5 (unregistering): Released all slaves [ 294.276181][ T13] bond6 (unregistering): Released all slaves [ 294.321010][ T5437] 8021q: adding VLAN 0 to HW filter on device eth26 [ 294.355179][ T5813] netdevsim netdevsim9 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.387840][T15768] can0 (unregistered): slcan off ttynull. [ 294.541386][T15850] loop5: detected capacity change from 0 to 7 [ 294.560199][T15850] Dev loop5: unable to read RDB block 7 [ 294.566948][T15850] loop5: AHDI p2 [ 294.571684][T15850] loop5: partition table partially beyond EOD, truncated [ 294.646610][T15853] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.697903][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 294.702847][ T5084] Bluetooth: hci3: command 0x040f tx timeout [ 294.711872][ T13] hsr_slave_0: left promiscuous mode [ 294.716598][ T13] hsr_slave_1: left promiscuous mode [ 294.718572][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.721214][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.765205][T15873] netlink: 'syz.3.3067': attribute type 10 has an invalid length. [ 294.788415][T15874] tmpfs: Bad value for 'mpol' [ 294.818743][ T13] team0 (unregistering): Port device team_slave_1 removed [ 294.827476][ T13] team0 (unregistering): Port device team_slave_0 removed [ 294.881671][ T5437] 8021q: adding VLAN 0 to HW filter on device eth27 [ 294.902816][ T5813] netdevsim netdevsim9 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.907190][ T5813] netdevsim netdevsim9 eth29: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.911382][ T5813] netdevsim netdevsim9 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.942756][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 295.004280][T15878] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 295.085983][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.097716][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.103446][T15802] bridge_slave_0: entered allmulticast mode [ 295.107381][T15802] bridge_slave_0: entered promiscuous mode [ 295.125241][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.127874][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.130443][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 295.130615][T15802] bridge_slave_1: entered allmulticast mode [ 295.133799][T15895] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3073'. [ 295.137439][T15802] bridge_slave_1: entered promiscuous mode [ 295.189418][ T5437] 8021q: adding VLAN 0 to HW filter on device eth28 [ 295.240778][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.245268][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.261366][T15900] loop5: detected capacity change from 0 to 7 [ 295.265460][T15900] Dev loop5: unable to read RDB block 7 [ 295.267308][T15900] loop5: AHDI p2 [ 295.269680][T15900] loop5: partition table partially beyond EOD, truncated [ 295.271922][T15902] openvswitch: netlink: IPv4 tunnel dst address is zero [ 295.288220][T15802] team0: Port device team_slave_0 added [ 295.294842][T15802] team0: Port device team_slave_1 added [ 295.336433][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.339416][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.350075][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.355174][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.359948][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.374738][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.426901][T15802] hsr_slave_0: entered promiscuous mode [ 295.430263][T15802] hsr_slave_1: entered promiscuous mode [ 295.433610][T15802] debugfs: 'hsr0' already exists in 'hsr' [ 295.435687][T15802] Cannot create hsr debugfs directory [ 295.476023][T15916] netlink: 'syz.8.3079': attribute type 10 has an invalid length. [ 295.496464][T15916] team0: Device ipvlan0 failed to register rx_handler [ 295.567242][ T5437] 8021q: adding VLAN 0 to HW filter on device eth29 [ 295.575601][T15921] tipc: Failed to remove unknown binding: 66,0,0/0:69200566/69200567 [ 295.635246][T15802] netdevsim netdevsim2 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.674831][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.866204][T15802] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.902757][ T5084] Bluetooth: hci2: command tx timeout [ 295.999633][T15957] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 296.035912][T15802] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.146498][T15802] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.236146][T15971] lo: entered allmulticast mode [ 296.249776][T15971] bond0: entered allmulticast mode [ 296.252972][T15971] dummy0: entered allmulticast mode [ 296.256658][T15971] eql: entered allmulticast mode [ 296.258659][T15971] ifb0: entered allmulticast mode [ 296.260648][T15971] ifb1: entered allmulticast mode [ 296.266111][T15971] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 296.274516][T15971] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 296.280334][T15971] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 296.284160][T15971] hwsim0: entered allmulticast mode [ 296.287398][T15971] ieee802154 phy0 wpan0: entered allmulticast mode [ 296.291548][T15971] ieee802154 phy1 wpan1: entered allmulticast mode [ 296.295540][T15971] teql0: entered allmulticast mode [ 296.297926][T15971] tunl0: entered allmulticast mode [ 296.300341][T15971] gre0: entered allmulticast mode [ 296.303724][T15971] gretap0: entered allmulticast mode [ 296.306093][T15971] erspan0: entered allmulticast mode [ 296.308379][T15971] ip_vti0: entered allmulticast mode [ 296.310687][T15971] ip6_vti0: entered allmulticast mode [ 296.313539][T15971] sit0: entered allmulticast mode [ 296.315802][T15971] ip6tnl0: entered allmulticast mode [ 296.318130][T15971] ip6gre0: entered allmulticast mode [ 296.320390][T15971] lapb0: entered allmulticast mode [ 296.323846][T15971] lapb1: entered allmulticast mode [ 296.326618][T15971] lapb2: entered allmulticast mode [ 296.329104][T15971] lapb3: entered allmulticast mode [ 296.331549][T15971] lapb4: entered allmulticast mode [ 296.334853][T15971] lapb5: entered allmulticast mode [ 296.337859][T15971] lowpan0: entered allmulticast mode [ 296.340311][T15971] vxlan0: entered allmulticast mode [ 296.343281][T15971] lapb7: entered allmulticast mode [ 296.346092][T15971] ieee802154 phy1 wpan2: entered allmulticast mode [ 296.348939][T15971] bond1: entered allmulticast mode [ 296.351509][T15971] lapb6: entered allmulticast mode [ 296.354815][T15971] netdevsim netdevsim1 eth6: entered allmulticast mode [ 296.358213][T15971] netdevsim netdevsim1 eth7: entered allmulticast mode [ 296.361608][T15971] netdevsim netdevsim1 eth8: entered allmulticast mode [ 296.365401][T15971] netdevsim netdevsim1 eth9: entered allmulticast mode [ 296.369406][T15971] ieee802154 phy0 wpan3: entered allmulticast mode [ 296.372939][T15971] netdevsim netdevsim4 eth10: entered allmulticast mode [ 296.376409][T15971] netdevsim netdevsim4 eth11: entered allmulticast mode [ 296.378891][T15971] netdevsim netdevsim4 eth12: entered allmulticast mode [ 296.381227][T15971] netdevsim netdevsim4 eth13: entered allmulticast mode [ 296.384006][T15971] netdevsim netdevsim6 eth14: entered allmulticast mode [ 296.387001][T15971] netdevsim netdevsim6 eth15: entered allmulticast mode [ 296.390394][T15971] netdevsim netdevsim6 eth16: entered allmulticast mode [ 296.394724][T15971] netdevsim netdevsim6 eth17: entered allmulticast mode [ 296.398170][T15971] ieee802154 phy2 wpan4: entered allmulticast mode [ 296.401027][T15971] netdevsim netdevsim0 eth18: entered allmulticast mode [ 296.405709][T15971] netdevsim netdevsim0 eth19: entered allmulticast mode [ 296.409330][T15971] netdevsim netdevsim0 eth20: entered allmulticast mode [ 296.413650][T15971] netdevsim netdevsim0 eth21: entered allmulticast mode [ 296.417114][T15971] netdevsim netdevsim5 eth22: entered allmulticast mode [ 296.420502][T15971] netdevsim netdevsim5 eth23: entered allmulticast mode [ 296.424667][T15971] netdevsim netdevsim5 eth24: entered allmulticast mode [ 296.428168][T15971] netdevsim netdevsim5 eth25: entered allmulticast mode [ 296.431657][T15971] lapb8: entered allmulticast mode [ 296.434647][T15971] netdevsim netdevsim9 eth26: entered allmulticast mode [ 296.438121][T15971] netdevsim netdevsim9 eth27: entered allmulticast mode [ 296.441528][T15971] netdevsim netdevsim9 eth28: entered allmulticast mode [ 296.445749][T15971] netdevsim netdevsim9 eth29: entered allmulticast mode [ 296.544575][T15802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.550944][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.554206][T15802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.559143][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.561974][T15802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.567144][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.572200][T15802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.576163][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.624430][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.635242][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.641618][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.644857][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.658856][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.662027][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.837224][T16008] FAULT_INJECTION: forcing a failure. [ 296.837224][T16008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.853083][T16008] CPU: 2 UID: 0 PID: 16008 Comm: syz.8.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.853106][T16008] Tainted: [L]=SOFTLOCKUP [ 296.853110][T16008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.853124][T16008] Call Trace: [ 296.853135][T16008] [ 296.853140][T16008] dump_stack_lvl+0x100/0x190 [ 296.853174][T16008] should_fail_ex.cold+0x5/0xa [ 296.853188][T16008] ? prepare_alloc_pages+0x16d/0x5f0 [ 296.853234][T16008] should_fail_alloc_page+0xeb/0x140 [ 296.853253][T16008] prepare_alloc_pages+0x1f0/0x5f0 [ 296.853277][T16008] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 296.853293][T16008] ? rcu_is_watching+0x12/0xc0 [ 296.853313][T16008] ? trace_mm_page_alloc+0x164/0x1c0 [ 296.853330][T16008] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 296.853345][T16008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.853359][T16008] ? is_bpf_text_address+0x8a/0x1a0 [ 296.853377][T16008] ? bpf_ksym_find+0x128/0x1c0 [ 296.853395][T16008] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.853410][T16008] ? is_bpf_text_address+0x94/0x1a0 [ 296.853426][T16008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.853438][T16008] ? __kernel_text_address+0xd/0x30 [ 296.853463][T16008] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 296.853479][T16008] ? policy_nodemask+0xed/0x4f0 [ 296.853497][T16008] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 296.853511][T16008] ? do_file_open+0x20e/0x430 [ 296.853531][T16008] __kasan_populate_vmalloc+0xf0/0x210 [ 296.853548][T16008] alloc_vmap_area+0x95d/0x2bb0 [ 296.853568][T16008] ? kasan_save_track+0x14/0x30 [ 296.853581][T16008] ? __kasan_kmalloc+0xaa/0xb0 [ 296.853594][T16008] ? __pfx_alloc_vmap_area+0x10/0x10 [ 296.853609][T16008] ? lockdep_hardirqs_off+0xa0/0xe0 [ 296.853626][T16008] ? __get_vm_area_node+0x101/0x330 [ 296.853643][T16008] __get_vm_area_node+0x1ca/0x330 [ 296.853662][T16008] __vmalloc_node_range_noprof+0x228/0x1630 [ 296.853680][T16008] ? n_tty_open+0x1a/0x170 [ 296.853740][T16008] ? n_tty_open+0x1a/0x170 [ 296.853759][T16008] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.853779][T16008] ? __ldsem_down_write_nested+0xfd/0x830 [ 296.853795][T16008] ? __ldsem_down_write_nested+0x10e/0x830 [ 296.853815][T16008] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 296.853834][T16008] ? n_tty_open+0x1a/0x170 [ 296.853849][T16008] __vmalloc_node_noprof+0xad/0xf0 [ 296.853865][T16008] ? n_tty_open+0x1a/0x170 [ 296.853882][T16008] ? __pfx_n_tty_open+0x10/0x10 [ 296.853897][T16008] n_tty_open+0x1a/0x170 [ 296.853914][T16008] tty_ldisc_open+0xa2/0x120 [ 296.853927][T16008] tty_ldisc_setup+0x40/0xf0 [ 296.853940][T16008] tty_init_dev.part.0+0x1b5/0x470 [ 296.853957][T16008] tty_open+0xa63/0xfa0 [ 296.853973][T16008] ? __pfx_tty_open+0x10/0x10 [ 296.853997][T16008] ? chrdev_open+0x10b/0x6a0 [ 296.854009][T16008] ? chrdev_open+0x10b/0x6a0 [ 296.854023][T16008] ? __pfx_tty_open+0x10/0x10 [ 296.854038][T16008] chrdev_open+0x234/0x6a0 [ 296.854051][T16008] ? __pfx_chrdev_open+0x10/0x10 [ 296.854064][T16008] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 296.854089][T16008] do_dentry_open+0x6ab/0x14d0 [ 296.854100][T16008] ? __pfx_chrdev_open+0x10/0x10 [ 296.854116][T16008] vfs_open+0x82/0x3f0 [ 296.854132][T16008] path_openat+0x2873/0x4280 [ 296.854150][T16008] ? __pfx_path_openat+0x10/0x10 [ 296.854167][T16008] do_file_open+0x20e/0x430 [ 296.854181][T16008] ? __pfx_do_file_open+0x10/0x10 [ 296.854203][T16008] ? alloc_fd+0x471/0x7a0 [ 296.854218][T16008] ? do_getname+0x191/0x390 [ 296.854234][T16008] do_sys_openat2+0x10f/0x1e0 [ 296.854249][T16008] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.854264][T16008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.854285][T16008] ? __fget_files+0x21f/0x3d0 [ 296.854299][T16008] __x64_sys_openat+0x12d/0x210 [ 296.854314][T16008] ? __pfx___x64_sys_openat+0x10/0x10 [ 296.854329][T16008] ? ksys_write+0x1ac/0x250 [ 296.854344][T16008] do_syscall_64+0x115/0x870 [ 296.854360][T16008] ? clear_bhb_loop+0x70/0xc0 [ 296.854374][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.854385][T16008] RIP: 0033:0x7f135279e0d9 [ 296.854397][T16008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.854408][T16008] RSP: 002b:00007f13536a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.854429][T16008] RAX: ffffffffffffffda RBX: 00007f1352a25fa0 RCX: 00007f135279e0d9 [ 296.854436][T16008] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 296.854443][T16008] RBP: 00007f13536a0090 R08: 0000000000000000 R09: 0000000000000000 [ 296.854449][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.854456][T16008] R13: 00007f1352a26038 R14: 00007f1352a25fa0 R15: 00007ffc252b0e38 [ 296.854470][T16008] [ 296.854622][T16008] syz.8.3092: vmalloc error: size 9112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 296.952496][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.954273][T16008] ,cpuset= [ 297.014868][T15802] veth0_vlan: entered promiscuous mode [ 297.016450][T16008] /,mems_allowed=0-1 [ 297.021502][T15802] veth1_vlan: entered promiscuous mode [ 297.022008][T16008] CPU: 2 UID: 0 PID: 16008 Comm: syz.8.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.022026][T16008] Tainted: [L]=SOFTLOCKUP [ 297.022030][T16008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.022038][T16008] Call Trace: [ 297.022043][T16008] [ 297.022048][T16008] dump_stack_lvl+0x100/0x190 [ 297.022067][T16008] warn_alloc.cold+0x94/0xa8 [ 297.022080][T16008] ? __pfx_warn_alloc+0x10/0x10 [ 297.022092][T16008] ? lockdep_hardirqs_on+0x78/0x100 [ 297.022112][T16008] ? __get_vm_area_node+0x2cd/0x330 [ 297.022131][T16008] ? __get_vm_area_node+0x208/0x330 [ 297.022149][T16008] __vmalloc_node_range_noprof+0xccd/0x1630 [ 297.022172][T16008] ? n_tty_open+0x1a/0x170 [ 297.022207][T16008] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.022224][T16008] ? __ldsem_down_write_nested+0xfd/0x830 [ 297.022240][T16008] ? __ldsem_down_write_nested+0x10e/0x830 [ 297.022260][T16008] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 297.022283][T16008] ? n_tty_open+0x1a/0x170 [ 297.022298][T16008] __vmalloc_node_noprof+0xad/0xf0 [ 297.022315][T16008] ? n_tty_open+0x1a/0x170 [ 297.022332][T16008] ? __pfx_n_tty_open+0x10/0x10 [ 297.022348][T16008] n_tty_open+0x1a/0x170 [ 297.022364][T16008] tty_ldisc_open+0xa2/0x120 [ 297.022376][T16008] tty_ldisc_setup+0x40/0xf0 [ 297.022390][T16008] tty_init_dev.part.0+0x1b5/0x470 [ 297.022407][T16008] tty_open+0xa63/0xfa0 [ 297.022424][T16008] ? __pfx_tty_open+0x10/0x10 [ 297.022438][T16008] ? chrdev_open+0x10b/0x6a0 [ 297.022450][T16008] ? chrdev_open+0x10b/0x6a0 [ 297.022464][T16008] ? __pfx_tty_open+0x10/0x10 [ 297.022479][T16008] chrdev_open+0x234/0x6a0 [ 297.022492][T16008] ? __pfx_chrdev_open+0x10/0x10 [ 297.022505][T16008] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 297.022523][T16008] do_dentry_open+0x6ab/0x14d0 [ 297.022534][T16008] ? __pfx_chrdev_open+0x10/0x10 [ 297.022550][T16008] vfs_open+0x82/0x3f0 [ 297.022566][T16008] path_openat+0x2873/0x4280 [ 297.022585][T16008] ? __pfx_path_openat+0x10/0x10 [ 297.022601][T16008] do_file_open+0x20e/0x430 [ 297.022615][T16008] ? __pfx_do_file_open+0x10/0x10 [ 297.022638][T16008] ? alloc_fd+0x471/0x7a0 [ 297.022652][T16008] ? do_getname+0x191/0x390 [ 297.022669][T16008] do_sys_openat2+0x10f/0x1e0 [ 297.022684][T16008] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.022699][T16008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.022716][T16008] ? __fget_files+0x21f/0x3d0 [ 297.022730][T16008] __x64_sys_openat+0x12d/0x210 [ 297.022746][T16008] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.022760][T16008] ? ksys_write+0x1ac/0x250 [ 297.022776][T16008] do_syscall_64+0x115/0x870 [ 297.022791][T16008] ? clear_bhb_loop+0x70/0xc0 [ 297.022805][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.022817][T16008] RIP: 0033:0x7f135279e0d9 [ 297.022827][T16008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.022838][T16008] RSP: 002b:00007f13536a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.022850][T16008] RAX: ffffffffffffffda RBX: 00007f1352a25fa0 RCX: 00007f135279e0d9 [ 297.022857][T16008] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 297.022864][T16008] RBP: 00007f13536a0090 R08: 0000000000000000 R09: 0000000000000000 [ 297.022871][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.022877][T16008] R13: 00007f1352a26038 R14: 00007f1352a25fa0 R15: 00007ffc252b0e38 [ 297.022891][T16008] [ 297.023012][T16008] Mem-Info: [ 297.023116][ T5084] Bluetooth: hci0: command 0x0419 tx timeout [ 297.050695][T15802] veth0_macvtap: entered promiscuous mode [ 297.052794][T16008] active_anon:1967 inactive_anon:23853 isolated_anon:0 [ 297.052794][T16008] active_file:19440 inactive_file:11770 isolated_file:0 [ 297.052794][T16008] unevictable:1000 dirty:76 writeback:0 [ 297.052794][T16008] slab_reclaimable:8276 slab_unreclaimable:73200 [ 297.052794][T16008] mapped:25431 shmem:17983 pagetables:4279 [ 297.052794][T16008] sec_pagetables:302 bounce:0 [ 297.052794][T16008] kernel_misc_reclaimable:0 [ 297.052794][T16008] free:442370 free_pcp:21459 free_cma:0 [ 297.057682][T15802] veth1_macvtap: entered promiscuous mode [ 297.059131][T16008] Node 0 active_anon:7860kB inactive_anon:68244kB active_file:77180kB inactive_file:44580kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:93432kB dirty:304kB writeback:0kB shmem:43176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16368kB pagetables:15932kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.092709][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.093630][T16008] Node 1 active_anon:8kB inactive_anon:27168kB active_file:580kB inactive_file:2500kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:8292kB dirty:0kB writeback:0kB shmem:28756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:1184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.100842][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.101222][T16008] Node 0 DMA free:14908kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:68kB active_file:8kB inactive_file:24kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:136kB free_cma:0kB [ 297.203198][T16008] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 297.205524][T16008] Node 0 DMA32 free:201312kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7860kB inactive_anon:68092kB active_file:77172kB inactive_file:44556kB unevictable:2000kB writepending:304kB zspages:248kB present:2080628kB managed:1255328kB mlocked:0kB bounce:0kB free_pcp:42952kB local_pcp:16048kB free_cma:0kB [ 297.222468][T16008] lowmem_reserve[]: 0 0 0 0 0 [ 297.225398][T16008] Node 1 Normal free:1552524kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:27168kB active_file:580kB inactive_file:2500kB unevictable:2000kB writepending:0kB zspages:364kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:43240kB local_pcp:15416kB free_cma:0kB [ 297.237301][T16008] lowmem_reserve[]: 0 0 0 0 0 [ 297.238885][T16008] Node 0 DMA: 17*4kB (UM) 13*8kB (UM) 15*16kB (UM) 19*32kB (UM) 15*64kB (UM) 11*128kB (UM) 13*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 14908kB [ 297.244789][T16008] Node 0 DMA32: 460*4kB (UME) 724*8kB (UME) 633*16kB (UM) 578*32kB (UME) 319*64kB (UME) 185*128kB (UME) 104*256kB (UME) 90*512kB (UM) 37*1024kB (UM) 5*2048kB (UM) 0*4096kB = 201184kB [ 297.252143][T16008] Node 1 Normal: 297*4kB (UME) 455*8kB (UME) 323*16kB (UME) 418*32kB (UME) 351*64kB (UME) 275*128kB (UME) 252*256kB (UME) 190*512kB (UME) 99*1024kB (UM) 18*2048kB (UM) 286*4096kB (UM) = 1552524kB [ 297.259128][T16008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.262485][T16008] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 297.265523][T16008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.268865][T16008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.285021][T16008] 49212 total pagecache pages [ 297.288624][T16008] 23 pages in swap cache [ 297.290112][T16008] Free swap = 124580kB [ 297.291733][T16008] Total swap = 124996kB [ 297.294017][T16008] 1048443 pages RAM [ 297.295390][T16008] 0 pages HighMem/MovableOnly [ 297.296982][T16008] 285300 pages reserved [ 297.298353][T16008] 0 pages cma reserved [ 297.300909][T16008] ttyGS ttyGS0: ldisc open failed (-12), clearing slot 0 [ 297.311333][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.316408][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.334978][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.340214][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.343040][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.346075][ T5084] Bluetooth: hci3: command 0x040f tx timeout [ 297.352501][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.382976][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.386128][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.570827][T16047] netlink: 'syz.8.3096': attribute type 10 has an invalid length. [ 297.585266][T16047] team0: Device ipvlan0 failed to register rx_handler [ 297.945250][T16080] loop5: detected capacity change from 0 to 7 [ 297.948231][T16080] Dev loop5: unable to read RDB block 7 [ 297.950106][T16080] loop5: AHDI p2 [ 297.951331][T16080] loop5: partition table partially beyond EOD, truncated [ 297.992692][ T5084] Bluetooth: hci2: command tx timeout [ 298.078061][T16092] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 298.085277][T16092] ipvlan0: entered allmulticast mode [ 298.086985][T16092] veth0_vlan: entered allmulticast mode [ 298.093376][T16092] team0: Device ipvlan0 failed to register rx_handler [ 298.333817][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 298.373227][T16120] FAULT_INJECTION: forcing a failure. [ 298.373227][T16120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.377558][T16120] CPU: 2 UID: 0 PID: 16120 Comm: syz.7.3120 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.377578][T16120] Tainted: [L]=SOFTLOCKUP [ 298.377582][T16120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.377596][T16120] Call Trace: [ 298.377609][T16120] [ 298.377614][T16120] dump_stack_lvl+0x100/0x190 [ 298.377682][T16120] should_fail_ex.cold+0x5/0xa [ 298.377703][T16120] ? prepare_alloc_pages+0x16d/0x5f0 [ 298.377736][T16120] should_fail_alloc_page+0xeb/0x140 [ 298.377754][T16120] prepare_alloc_pages+0x1f0/0x5f0 [ 298.377773][T16120] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 298.377789][T16120] ? rcu_is_watching+0x12/0xc0 [ 298.377814][T16120] ? trace_mm_page_alloc+0x164/0x1c0 [ 298.377833][T16120] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 298.377849][T16120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.377863][T16120] ? is_bpf_text_address+0x8a/0x1a0 [ 298.377880][T16120] ? bpf_ksym_find+0x128/0x1c0 [ 298.377898][T16120] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.377912][T16120] ? is_bpf_text_address+0x94/0x1a0 [ 298.377927][T16120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.377941][T16120] ? __kernel_text_address+0xd/0x30 [ 298.377965][T16120] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 298.377981][T16120] ? policy_nodemask+0xed/0x4f0 [ 298.377998][T16120] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 298.378013][T16120] ? do_file_open+0x20e/0x430 [ 298.378032][T16120] __kasan_populate_vmalloc+0xf0/0x210 [ 298.378049][T16120] alloc_vmap_area+0x95d/0x2bb0 [ 298.378068][T16120] ? kasan_save_track+0x14/0x30 [ 298.378082][T16120] ? __kasan_kmalloc+0xaa/0xb0 [ 298.378096][T16120] ? __pfx_alloc_vmap_area+0x10/0x10 [ 298.378110][T16120] ? lockdep_hardirqs_off+0xa0/0xe0 [ 298.378162][T16120] ? __get_vm_area_node+0x101/0x330 [ 298.378180][T16120] __get_vm_area_node+0x1ca/0x330 [ 298.378198][T16120] __vmalloc_node_range_noprof+0x228/0x1630 [ 298.378216][T16120] ? n_tty_open+0x1a/0x170 [ 298.378266][T16120] ? n_tty_open+0x1a/0x170 [ 298.378286][T16120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.378303][T16120] ? __ldsem_down_write_nested+0xfd/0x830 [ 298.378320][T16120] ? __ldsem_down_write_nested+0x10e/0x830 [ 298.378344][T16120] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 298.378363][T16120] ? n_tty_open+0x1a/0x170 [ 298.378378][T16120] __vmalloc_node_noprof+0xad/0xf0 [ 298.378395][T16120] ? n_tty_open+0x1a/0x170 [ 298.378411][T16120] ? __pfx_n_tty_open+0x10/0x10 [ 298.378426][T16120] n_tty_open+0x1a/0x170 [ 298.378443][T16120] tty_ldisc_open+0xa2/0x120 [ 298.378456][T16120] tty_ldisc_setup+0x40/0xf0 [ 298.378469][T16120] tty_init_dev.part.0+0x1b5/0x470 [ 298.378486][T16120] tty_open+0xa63/0xfa0 [ 298.378503][T16120] ? __pfx_tty_open+0x10/0x10 [ 298.378516][T16120] ? chrdev_open+0x10b/0x6a0 [ 298.378528][T16120] ? chrdev_open+0x10b/0x6a0 [ 298.378542][T16120] ? __pfx_tty_open+0x10/0x10 [ 298.378556][T16120] chrdev_open+0x234/0x6a0 [ 298.378569][T16120] ? __pfx_chrdev_open+0x10/0x10 [ 298.378598][T16120] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 298.378617][T16120] do_dentry_open+0x6ab/0x14d0 [ 298.378628][T16120] ? __pfx_chrdev_open+0x10/0x10 [ 298.378643][T16120] vfs_open+0x82/0x3f0 [ 298.378659][T16120] path_openat+0x2873/0x4280 [ 298.378678][T16120] ? __pfx_path_openat+0x10/0x10 [ 298.378694][T16120] do_file_open+0x20e/0x430 [ 298.378708][T16120] ? __pfx_do_file_open+0x10/0x10 [ 298.378731][T16120] ? alloc_fd+0x471/0x7a0 [ 298.378745][T16120] ? do_getname+0x191/0x390 [ 298.378762][T16120] do_sys_openat2+0x10f/0x1e0 [ 298.378777][T16120] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.378792][T16120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.378809][T16120] ? __fget_files+0x21f/0x3d0 [ 298.378824][T16120] __x64_sys_openat+0x12d/0x210 [ 298.378839][T16120] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.378854][T16120] ? ksys_write+0x1ac/0x250 [ 298.378869][T16120] do_syscall_64+0x115/0x870 [ 298.378884][T16120] ? clear_bhb_loop+0x70/0xc0 [ 298.378899][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.378911][T16120] RIP: 0033:0x7f2c6279e0d9 [ 298.378922][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.378933][T16120] RSP: 002b:00007f2c63697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.378953][T16120] RAX: ffffffffffffffda RBX: 00007f2c62a25fa0 RCX: 00007f2c6279e0d9 [ 298.378960][T16120] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 298.378967][T16120] RBP: 00007f2c63697090 R08: 0000000000000000 R09: 0000000000000000 [ 298.378973][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.378980][T16120] R13: 00007f2c62a26038 R14: 00007f2c62a25fa0 R15: 00007fffbcd3c9d8 [ 298.378995][T16120] [ 298.379105][T16120] ttyGS ttyGS0: ldisc open failed (-12), clearing slot 0 [ 298.392968][T16121] netlink: 'syz.3.3118': attribute type 10 has an invalid length. [ 298.579830][T16128] loop5: detected capacity change from 0 to 7 [ 298.588052][T16128] Dev loop5: unable to read RDB block 7 [ 298.590331][T16128] loop5: AHDI p2 [ 298.591790][T16128] loop5: partition table partially beyond EOD, truncated [ 298.696824][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 298.696858][ T42] audit: type=1326 audit(1786252210.768:21477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.7.3127" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c6279e0d9 code=0x0 [ 298.763940][T16144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.914518][T16154] netlink: 'syz.8.3133': attribute type 10 has an invalid length. [ 298.934695][T16154] team0: Device ipvlan0 failed to register rx_handler [ 298.945588][T16157] FAULT_INJECTION: forcing a failure. [ 298.945588][T16157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.958481][T16157] CPU: 3 UID: 0 PID: 16157 Comm: syz.3.3135 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.958514][T16157] Tainted: [L]=SOFTLOCKUP [ 298.958520][T16157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.958533][T16157] Call Trace: [ 298.958549][T16157] [ 298.958558][T16157] dump_stack_lvl+0x100/0x190 [ 298.958743][T16157] should_fail_ex.cold+0x5/0xa [ 298.958779][T16157] ? fs_reclaim_acquire+0x70/0x100 [ 298.958830][T16157] should_fail_alloc_page+0xeb/0x140 [ 298.958858][T16157] prepare_alloc_pages+0x1f0/0x5f0 [ 298.958894][T16157] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 298.958916][T16157] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 298.958983][T16157] ? look_up_lock_class+0x55/0x120 [ 298.959073][T16157] ? register_lock_class+0x40/0x560 [ 298.959110][T16157] ? find_held_lock+0x2b/0x80 [ 298.959127][T16157] ? ima_match_policy+0x8b8/0x2340 [ 298.959150][T16157] ? ima_match_policy+0x8b8/0x2340 [ 298.959175][T16157] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.959196][T16157] ? __lock_acquire+0x49f/0x1a40 [ 298.959238][T16157] ? __lock_acquire+0x49f/0x1a40 [ 298.959263][T16157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.959290][T16157] ? policy_nodemask+0xed/0x4f0 [ 298.959318][T16157] alloc_pages_mpol+0x1fb/0x540 [ 298.959344][T16157] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.959369][T16157] ? filemap_get_entry+0x22d/0x450 [ 298.959388][T16157] ? filemap_get_entry+0x22d/0x450 [ 298.959411][T16157] folio_alloc_noprof+0x22/0x250 [ 298.959440][T16157] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 298.959470][T16157] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 298.959516][T16157] ? __lock_acquire+0x49f/0x1a40 [ 298.959544][T16157] __filemap_get_folio_mpol+0x653/0x1320 [ 298.959571][T16157] iomap_write_begin+0x1810/0x2480 [ 298.959613][T16157] ? is_bpf_text_address+0x94/0x1a0 [ 298.959641][T16157] ? __pfx_iomap_write_begin+0x10/0x10 [ 298.959663][T16157] ? fault_in_readable+0x14c/0x190 [ 298.959686][T16157] ? __pfx_fault_in_readable+0x10/0x10 [ 298.959707][T16157] ? rcu_is_watching+0x12/0xc0 [ 298.959732][T16157] ? I_BDEV+0xd/0x20 [ 298.959761][T16157] ? inode_to_bdi+0x9e/0x160 [ 298.959790][T16157] iomap_file_buffered_write+0x48b/0xaf0 [ 298.959815][T16157] ? find_held_lock+0x2b/0x80 [ 298.959835][T16157] ? inode_set_ctime_to_ts+0x131/0x3e0 [ 298.959862][T16157] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 298.959896][T16157] ? inode_set_ctime_current+0x283/0x850 [ 298.959934][T16157] ? __mark_inode_dirty+0x55c/0x16e0 [ 298.959963][T16157] ? __pfx_down_read+0x10/0x10 [ 298.959987][T16157] ? preempt_count_add+0x76/0x150 [ 298.960011][T16157] ? mnt_put_write_access_file+0x4e/0x100 [ 298.960032][T16157] ? file_update_time_flags+0x373/0x500 [ 298.960060][T16157] blkdev_write_iter+0x575/0xd30 [ 298.960116][T16157] vfs_write+0x6ac/0x1050 [ 298.960138][T16157] ? __pfx_blkdev_write_iter+0x10/0x10 [ 298.960166][T16157] ? __pfx_vfs_write+0x10/0x10 [ 298.960181][T16157] ? find_held_lock+0x2b/0x80 [ 298.960215][T16157] __x64_sys_pwrite64+0x1eb/0x250 [ 298.960236][T16157] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 298.960262][T16157] do_syscall_64+0x115/0x870 [ 298.960285][T16157] ? clear_bhb_loop+0x70/0xc0 [ 298.960309][T16157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.960328][T16157] RIP: 0033:0x7fa76719e0d9 [ 298.960346][T16157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.960363][T16157] RSP: 002b:00007fa768122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 298.960393][T16157] RAX: ffffffffffffffda RBX: 00007fa767425fa0 RCX: 00007fa76719e0d9 [ 298.960405][T16157] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 298.960416][T16157] RBP: 00007fa768122090 R08: 0000000000000000 R09: 0000000000000000 [ 298.960427][T16157] R10: 00000000000003fc R11: 0000000000000246 R12: 0000000000000001 [ 298.960437][T16157] R13: 00007fa767426038 R14: 00007fa767425fa0 R15: 00007ffd46cfa3d8 [ 298.960463][T16157] [ 299.255963][T16172] netlink: 'syz.8.3141': attribute type 1 has an invalid length. [ 299.277509][T16172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.548204][T16189] netlink: 'syz.8.3146': attribute type 10 has an invalid length. [ 299.554743][T16189] team0: Device ipvlan0 failed to register rx_handler [ 299.635984][T16196] loop5: detected capacity change from 0 to 7 [ 299.657734][T16196] Dev loop5: unable to read RDB block 7 [ 299.659415][T16196] loop5: AHDI p2 [ 299.661497][T16196] loop5: partition table partially beyond EOD, truncated [ 299.711768][T16204] netlink: 'syz.7.3153': attribute type 1 has an invalid length. [ 299.729474][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.747765][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.750028][T16204] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 299.756192][T16204] bond4: (slave vti0): Error -95 calling set_mac_address [ 299.804394][T16201] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 299.858189][T16216] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.3157'. [ 299.910771][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 299.984266][T16227] netlink: 'syz.3.3158': attribute type 10 has an invalid length. [ 299.991051][T16226] FAULT_INJECTION: forcing a failure. [ 299.991051][T16226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.999971][T16226] CPU: 2 UID: 0 PID: 16226 Comm: syz.7.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.999991][T16226] Tainted: [L]=SOFTLOCKUP [ 299.999996][T16226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.000014][T16226] Call Trace: [ 300.000024][T16226] [ 300.000029][T16226] dump_stack_lvl+0x100/0x190 [ 300.000152][T16226] should_fail_ex.cold+0x5/0xa [ 300.000178][T16226] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 300.000225][T16226] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 300.000241][T16226] ? fault_in_readable+0x14c/0x190 [ 300.000271][T16226] ? __pfx_fault_in_readable+0x10/0x10 [ 300.000284][T16226] ? rcu_is_watching+0x12/0xc0 [ 300.000312][T16226] ? I_BDEV+0xd/0x20 [ 300.000325][T16226] ? inode_to_bdi+0x9e/0x160 [ 300.000348][T16226] iomap_file_buffered_write+0x532/0xaf0 [ 300.000373][T16226] ? inode_set_ctime_to_ts+0x131/0x3e0 [ 300.000391][T16226] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 300.000409][T16226] ? inode_set_ctime_current+0x283/0x850 [ 300.000432][T16226] ? __mark_inode_dirty+0x55c/0x16e0 [ 300.000451][T16226] ? __pfx_down_read+0x10/0x10 [ 300.000509][T16226] ? preempt_count_add+0x76/0x150 [ 300.000524][T16226] ? mnt_put_write_access_file+0x4e/0x100 [ 300.000538][T16226] ? file_update_time_flags+0x373/0x500 [ 300.000556][T16226] blkdev_write_iter+0x575/0xd30 [ 300.000576][T16226] vfs_write+0x6ac/0x1050 [ 300.000588][T16226] ? __pfx_blkdev_write_iter+0x10/0x10 [ 300.000606][T16226] ? __pfx_vfs_write+0x10/0x10 [ 300.000616][T16226] ? find_held_lock+0x2b/0x80 [ 300.000636][T16226] __x64_sys_pwrite64+0x1eb/0x250 [ 300.000648][T16226] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 300.000663][T16226] do_syscall_64+0x115/0x870 [ 300.000679][T16226] ? clear_bhb_loop+0x70/0xc0 [ 300.000694][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.000707][T16226] RIP: 0033:0x7f2c6279e0d9 [ 300.000718][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.000735][T16226] RSP: 002b:00007f2c63697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 300.000754][T16226] RAX: ffffffffffffffda RBX: 00007f2c62a25fa0 RCX: 00007f2c6279e0d9 [ 300.000761][T16226] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 300.000769][T16226] RBP: 00007f2c63697090 R08: 0000000000000000 R09: 0000000000000000 [ 300.000776][T16226] R10: 00000000000003fc R11: 0000000000000246 R12: 0000000000000001 [ 300.000783][T16226] R13: 00007f2c62a26038 R14: 00007f2c62a25fa0 R15: 00007fffbcd3c9d8 [ 300.000798][T16226] [ 300.081904][ T5084] Bluetooth: hci2: command tx timeout [ 300.147895][T16237] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 300.190408][T16237] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.222336][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.238315][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3169'. [ 300.245533][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3169'. [ 300.250218][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3169'. [ 300.254017][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3169'. [ 300.258488][T16248] ip_tables: iptables: counters copy to user failed while replacing table [ 300.270845][ T42] audit: type=1400 audit(1786252212.328:21478): avc: denied { append } for pid=16247 comm="syz.3.3170" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 300.323538][T16255] netlink: 'syz.7.3174': attribute type 1 has an invalid length. [ 300.347580][T16255] bond5: entered promiscuous mode [ 300.349518][T16255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.377619][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 300.401480][T16255] veth5: entered allmulticast mode [ 300.407161][T16255] bond5: (slave veth5): making interface the new active one [ 300.409580][T16255] veth5: entered promiscuous mode [ 300.411737][T16255] bond5: (slave veth5): Enslaving as an active interface with an up link [ 300.420313][T16262] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 300.424875][T16262] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 300.533747][T16272] loop5: detected capacity change from 0 to 7 [ 300.539539][T16272] Dev loop5: unable to read RDB block 7 [ 300.541323][T16272] loop5: AHDI p2 [ 300.542949][T16272] loop5: partition table partially beyond EOD, truncated [ 300.644254][T16278] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3180'. [ 300.697466][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 300.711980][ T5084] Bluetooth: hci3: command 0x040f tx timeout [ 300.723809][ T42] audit: type=1400 audit(1786252212.798:21479): avc: denied { bind } for pid=16282 comm="syz.3.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.742369][T16285] FAULT_INJECTION: forcing a failure. [ 300.742369][T16285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.747351][T16285] CPU: 0 UID: 0 PID: 16285 Comm: syz.8.3184 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.747379][T16285] Tainted: [L]=SOFTLOCKUP [ 300.747386][T16285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.747397][T16285] Call Trace: [ 300.747404][T16285] [ 300.747411][T16285] dump_stack_lvl+0x100/0x190 [ 300.747440][T16285] should_fail_ex.cold+0x5/0xa [ 300.747463][T16285] _copy_to_user+0x32/0xd0 [ 300.747490][T16285] simple_read_from_buffer+0xcb/0x170 [ 300.747512][T16285] proc_fail_nth_read+0x1af/0x230 [ 300.747543][T16285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.747572][T16285] ? rw_verify_area+0xce/0x6d0 [ 300.747597][T16285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.747624][T16285] vfs_read+0x1e4/0xb40 [ 300.747654][T16285] ? __pfx_vfs_read+0x10/0x10 [ 300.747680][T16285] ? __fget_files+0x215/0x3d0 [ 300.747705][T16285] ? __fget_files+0x21f/0x3d0 [ 300.747729][T16285] ksys_read+0x12a/0x250 [ 300.747745][T16285] ? __pfx_ksys_read+0x10/0x10 [ 300.747767][T16285] do_syscall_64+0x115/0x870 [ 300.747791][T16285] ? clear_bhb_loop+0x70/0xc0 [ 300.747813][T16285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.747831][T16285] RIP: 0033:0x7f135275e90e [ 300.747846][T16285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.747863][T16285] RSP: 002b:00007f135369ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.747881][T16285] RAX: ffffffffffffffda RBX: 00007f13536a06c0 RCX: 00007f135275e90e [ 300.747892][T16285] RDX: 000000000000000f RSI: 00007f13536a00a0 RDI: 0000000000000004 [ 300.747903][T16285] RBP: 00007f13536a0090 R08: 0000000000000000 R09: 0000000000000000 [ 300.747913][T16285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.747923][T16285] R13: 00007f1352a26038 R14: 00007f1352a25fa0 R15: 00007ffc252b0e38 [ 300.747947][T16285] [ 300.930560][T16296] FAULT_INJECTION: forcing a failure. [ 300.930560][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.935005][T16296] CPU: 0 UID: 0 PID: 16296 Comm: syz.3.3189 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.935023][T16296] Tainted: [L]=SOFTLOCKUP [ 300.935027][T16296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.935034][T16296] Call Trace: [ 300.935038][T16296] [ 300.935043][T16296] dump_stack_lvl+0x100/0x190 [ 300.935062][T16296] should_fail_ex.cold+0x5/0xa [ 300.935077][T16296] _copy_from_user+0x2e/0xd0 [ 300.935094][T16296] get_bitmap+0xde/0x1a0 [ 300.935110][T16296] get_nodes+0x1df/0x210 [ 300.935125][T16296] ? __pfx_get_nodes+0x10/0x10 [ 300.935139][T16296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.935157][T16296] ? __fget_files+0x21f/0x3d0 [ 300.935171][T16296] kernel_migrate_pages+0x8e/0x700 [ 300.935188][T16296] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 300.935206][T16296] ? __pfx_ksys_write+0x10/0x10 [ 300.935219][T16296] __x64_sys_migrate_pages+0x96/0x100 [ 300.935236][T16296] ? lockdep_hardirqs_on+0x78/0x100 [ 300.935251][T16296] do_syscall_64+0x115/0x870 [ 300.935266][T16296] ? clear_bhb_loop+0x70/0xc0 [ 300.935279][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.935291][T16296] RIP: 0033:0x7fa76719e0d9 [ 300.935301][T16296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.935312][T16296] RSP: 002b:00007fa768122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 300.935324][T16296] RAX: ffffffffffffffda RBX: 00007fa767425fa0 RCX: 00007fa76719e0d9 [ 300.935332][T16296] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 300.935338][T16296] RBP: 00007fa768122090 R08: 0000000000000000 R09: 0000000000000000 [ 300.935345][T16296] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 300.935352][T16296] R13: 00007fa767426038 R14: 00007fa767425fa0 R15: 00007ffd46cfa3d8 [ 300.935365][T16296] [ 300.993821][T16300] team0: Device ipvlan0 failed to register rx_handler [ 301.199200][T16318] binder: 16317:16318 ioctl c0306201 200000000680 returned -14 [ 301.316987][ T42] audit: type=1400 audit(1786252213.388:21480): avc: denied { watch } for pid=16325 comm="syz.3.3200" path="/286/file0" dev="overlay" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 301.318980][T16329] FAULT_INJECTION: forcing a failure. [ 301.318980][T16329] name failslab, interval 1, probability 0, space 0, times 0 [ 301.334413][T16329] CPU: 0 UID: 0 PID: 16329 Comm: syz.7.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.334445][T16329] Tainted: [L]=SOFTLOCKUP [ 301.334450][T16329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.334457][T16329] Call Trace: [ 301.334474][T16329] [ 301.334480][T16329] dump_stack_lvl+0x100/0x190 [ 301.334500][T16329] should_fail_ex.cold+0x5/0xa [ 301.334515][T16329] should_failslab+0xc2/0x120 [ 301.334531][T16329] __kmalloc_node_noprof+0x101/0x830 [ 301.334547][T16329] ? __kfifo_alloc_node+0x142/0x280 [ 301.334569][T16329] __kfifo_alloc_node+0x142/0x280 [ 301.334586][T16329] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.334603][T16329] gs_open+0x385/0x5d0 [ 301.334659][T16329] ? __pfx_gs_open+0x10/0x10 [ 301.334669][T16329] tty_open+0x3dd/0xfa0 [ 301.334705][T16329] ? __pfx_tty_open+0x10/0x10 [ 301.334719][T16329] ? chrdev_open+0x10b/0x6a0 [ 301.334731][T16329] ? chrdev_open+0x10b/0x6a0 [ 301.334745][T16329] ? __pfx_tty_open+0x10/0x10 [ 301.334760][T16329] chrdev_open+0x234/0x6a0 [ 301.334773][T16329] ? __pfx_chrdev_open+0x10/0x10 [ 301.334786][T16329] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 301.334804][T16329] do_dentry_open+0x6ab/0x14d0 [ 301.334815][T16329] ? __pfx_chrdev_open+0x10/0x10 [ 301.334830][T16329] vfs_open+0x82/0x3f0 [ 301.334846][T16329] path_openat+0x2873/0x4280 [ 301.334865][T16329] ? __pfx_path_openat+0x10/0x10 [ 301.334882][T16329] do_file_open+0x20e/0x430 [ 301.334896][T16329] ? __pfx_do_file_open+0x10/0x10 [ 301.334918][T16329] ? alloc_fd+0x471/0x7a0 [ 301.334933][T16329] ? do_getname+0x191/0x390 [ 301.334949][T16329] do_sys_openat2+0x10f/0x1e0 [ 301.334964][T16329] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.334979][T16329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.334997][T16329] ? __fget_files+0x21f/0x3d0 [ 301.335011][T16329] __x64_sys_openat+0x12d/0x210 [ 301.335026][T16329] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.335040][T16329] ? ksys_write+0x1ac/0x250 [ 301.335056][T16329] do_syscall_64+0x115/0x870 [ 301.335071][T16329] ? clear_bhb_loop+0x70/0xc0 [ 301.335085][T16329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.335097][T16329] RIP: 0033:0x7f2c6279e0d9 [ 301.335108][T16329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.335119][T16329] RSP: 002b:00007f2c63697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.335131][T16329] RAX: ffffffffffffffda RBX: 00007f2c62a25fa0 RCX: 00007f2c6279e0d9 [ 301.335138][T16329] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 301.335146][T16329] RBP: 00007f2c63697090 R08: 0000000000000000 R09: 0000000000000000 [ 301.335152][T16329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.335159][T16329] R13: 00007f2c62a26038 R14: 00007f2c62a25fa0 R15: 00007fffbcd3c9d8 [ 301.335173][T16329] [ 301.335991][T16329] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000074: 0000 [#1] SMP KASAN NOPTI [ 301.335992][ T42] audit: type=1400 audit(1786252213.388:21481): avc: denied { watch_sb } for pid=16325 comm="syz.3.3200" path="/286/file0" dev="overlay" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 301.339260][T16329] KASAN: null-ptr-deref in range [0x00000000000003a0-0x00000000000003a7] [ 301.339278][T16329] CPU: 0 UID: 0 PID: 16329 Comm: syz.7.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.339294][T16329] Tainted: [L]=SOFTLOCKUP [ 301.339299][T16329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.346445][ T42] audit: type=1400 audit(1786252213.418:21482): avc: denied { read } for pid=5117 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 301.346809][T16329] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 301.348319][ T42] audit: type=1400 audit(1786252213.418:21483): avc: denied { search } for pid=5117 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.349657][T16329] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 301.349671][T16329] RSP: 0018:ffffc9000611f5e0 EFLAGS: 00010086 [ 301.349683][T16329] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 301.351162][ T42] audit: type=1400 audit(1786252213.418:21484): avc: denied { write search } for pid=5117 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.352752][T16329] RDX: 0000000000000000 RSI: ffffffff8bbdb5e6 RDI: dffffc0000000074 [ 301.352762][T16329] RBP: 00000000000003a0 R08: 0000000000000001 R09: 0000000000000000 [ 301.352769][T16329] R10: ffffffff912192d7 R11: 0000000000000000 R12: ffffffff8bbdb5e6 [ 301.352777][T16329] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 301.352784][T16329] FS: 00007f2c636976c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 301.352807][T16329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.352817][T16329] CR2: 00007f2c62670000 CR3: 000000003d185000 CR4: 0000000000352ef0 [ 301.352825][T16329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 301.352832][T16329] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.352839][T16329] Call Trace: [ 301.352843][T16329] [ 301.352847][T16329] __kasan_check_byte+0x13/0x50 [ 301.352865][T16329] lock_acquire+0x132/0x370 [ 301.355908][ T42] audit: type=1400 audit(1786252213.418:21485): avc: denied { add_name } for pid=5117 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.356055][T16329] ? __lock_acquire+0x49f/0x1a40 [ 301.357818][ T42] audit: type=1400 audit(1786252213.418:21486): avc: denied { create } for pid=5117 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 301.358958][T16329] ? _raw_spin_lock_irq+0x45/0x50 [ 301.358975][T16329] _raw_spin_lock_irq+0x36/0x50 [ 301.358988][T16329] ? gs_close+0xb9/0xca0 [ 301.522130][T16329] gs_close+0xb9/0xca0 [ 301.523822][T16329] ? do_raw_spin_lock+0x128/0x260 [ 301.525624][T16329] ? find_held_lock+0x2b/0x80 [ 301.527143][T16329] ? __pfx_gs_close+0x10/0x10 [ 301.528643][T16329] ? do_raw_spin_unlock+0x145/0x1e0 [ 301.530277][T16329] ? _raw_spin_unlock+0x28/0x50 [ 301.531799][T16329] ? fasync_remove_entry+0x174/0x1e0 [ 301.533398][T16329] ? __pfx_gs_close+0x10/0x10 [ 301.534828][T16329] tty_release+0x40e/0x1300 [ 301.536262][T16329] ? __pfx_gs_open+0x10/0x10 [ 301.537672][T16329] tty_open+0x42f/0xfa0 [ 301.538924][T16329] ? __pfx_tty_open+0x10/0x10 [ 301.540309][T16329] ? chrdev_open+0x10b/0x6a0 [ 301.541737][T16329] ? chrdev_open+0x10b/0x6a0 [ 301.543143][T16329] ? __pfx_tty_open+0x10/0x10 [ 301.544571][T16329] chrdev_open+0x234/0x6a0 [ 301.545936][T16329] ? __pfx_chrdev_open+0x10/0x10 [ 301.547383][T16329] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 301.549242][T16329] do_dentry_open+0x6ab/0x14d0 [ 301.550683][T16329] ? __pfx_chrdev_open+0x10/0x10 [ 301.552179][T16329] vfs_open+0x82/0x3f0 [ 301.553422][T16329] path_openat+0x2873/0x4280 [ 301.554828][T16329] ? __pfx_path_openat+0x10/0x10 [ 301.556318][T16329] do_file_open+0x20e/0x430 [ 301.557634][T16329] ? __pfx_do_file_open+0x10/0x10 [ 301.559134][T16329] ? alloc_fd+0x471/0x7a0 [ 301.560412][T16329] ? do_getname+0x191/0x390 [ 301.561751][T16329] do_sys_openat2+0x10f/0x1e0 [ 301.563124][T16329] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.564653][T16329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.566443][T16329] ? __fget_files+0x21f/0x3d0 [ 301.567843][T16329] __x64_sys_openat+0x12d/0x210 [ 301.569275][T16329] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.570822][T16329] ? ksys_write+0x1ac/0x250 [ 301.572167][T16329] do_syscall_64+0x115/0x870 [ 301.573543][T16329] ? clear_bhb_loop+0x70/0xc0 [ 301.574959][T16329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.576744][T16329] RIP: 0033:0x7f2c6279e0d9 [ 301.578084][T16329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.583797][T16329] RSP: 002b:00007f2c63697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.586289][T16329] RAX: ffffffffffffffda RBX: 00007f2c62a25fa0 RCX: 00007f2c6279e0d9 [ 301.588528][T16329] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 301.590810][T16329] RBP: 00007f2c63697090 R08: 0000000000000000 R09: 0000000000000000 [ 301.593126][T16329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.595422][T16329] R13: 00007f2c62a26038 R14: 00007f2c62a25fa0 R15: 00007fffbcd3c9d8 [ 301.597730][T16329] [ 301.598674][T16329] Modules linked in: [ 301.599875][T16329] ---[ end trace 0000000000000000 ]--- [ 301.601511][T16329] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 301.603270][T16329] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 301.608798][T16329] RSP: 0018:ffffc9000611f5e0 EFLAGS: 00010086 [ 301.610624][T16329] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 301.612930][T16329] RDX: 0000000000000000 RSI: ffffffff8bbdb5e6 RDI: dffffc0000000074 [ 301.615203][T16329] RBP: 00000000000003a0 R08: 0000000000000001 R09: 0000000000000000 [ 301.617579][T16329] R10: ffffffff912192d7 R11: 0000000000000000 R12: ffffffff8bbdb5e6 [ 301.619949][T16329] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 301.622329][T16329] FS: 00007f2c636976c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 301.624910][T16329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.626878][T16329] CR2: 00007f2c62670000 CR3: 000000003d185000 CR4: 0000000000352ef0 [ 301.629171][T16329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 301.631449][T16329] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.633729][T16329] Kernel panic - not syncing: Fatal exception [ 301.636185][T16329] Kernel Offset: disabled [ 301.637468][T16329] Rebooting in 86400 seconds..