last executing test programs: 41.950690051s ago: executing program 2 (id=1796): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0xf0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 41.882197195s ago: executing program 2 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x7, 0x0, 0x0, 0xbf7ff5b}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 41.822106868s ago: executing program 2 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3008}]}, 0x24}}, 0x40084) 41.821180942s ago: executing program 2 (id=1799): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r5, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x2}, 0x8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r6, {}, {}, {0xb, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000004) 41.758835377s ago: executing program 2 (id=1801): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f0000000000)={0x5, 0x5, 0x6, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r4) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xd}, @IFLA_GRE_IKEY={0x8, 0x4, 0x100}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') fremovexattr(r5, &(0x7f0000000140)=@random={'trusted.', 'cgroup.kill\x00'}) 41.660877819s ago: executing program 2 (id=1804): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="140000001a005f7fb3e45f2024d21206013a5914", 0x14) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000140)={r0}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x11e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000300)="9c676f650a1dd2cd220289c2f2b02934a99e48414cc61e267d50979b70ad033a530a3947eeab86d967dc2d8e8f3e58bb53eba651f39bfd1f860e33ee92fc16682d7a800bfaceb48d38ce342a855c8ff3e1db3340c49ce040269a4d0980871cbaa171aa", 0x63) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a00000090000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001901000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x150, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5f}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 26.668119947s ago: executing program 32 (id=1804): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="140000001a005f7fb3e45f2024d21206013a5914", 0x14) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000140)={r0}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x11e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000300)="9c676f650a1dd2cd220289c2f2b02934a99e48414cc61e267d50979b70ad033a530a3947eeab86d967dc2d8e8f3e58bb53eba651f39bfd1f860e33ee92fc16682d7a800bfaceb48d38ce342a855c8ff3e1db3340c49ce040269a4d0980871cbaa171aa", 0x63) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a00000090000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001901000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x150, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5f}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 15.661290898s ago: executing program 3 (id=2180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) fadvise64(r1, 0x4, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000778c1081780394a24b77aed719669e11121282686edb79c0ef37ffdf2c475645cb8a0e04981aae88b9903c4734d5be1b55dfdce85e8966bb338b922e6ab6ad30d5d5cd42f8579f6d60808e5212f4cc37b43e09dffc8d6898f24293cd22d68720ce87fcd284f9c4f133c7d79c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00210000000080000008fff90000000500000000000000f7fdb7ff8ea6d96e8a22fb6a06597898ca8be459adde0b5ee73fea98c9aaaf5ff881c9ca738c7334a4fee1c3fef31758af37633f9e18faa08efcfd28698535bd"], 0x1c}}, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) r7 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000240)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000240)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) setsockopt$sock_timeval(r10, 0x1, 0x50, &(0x7f0000abaff9), 0x10) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x2000c4b0) 15.092142293s ago: executing program 4 (id=2186): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x6, 0x7fff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x13, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x12, r0, 0x1, 0x70bd2d, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0xffffffffffffff6d, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0x7ff, 0x5, 0x3, 0xfbff}}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0xff51, 0x9, 0x2, 0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 15.091718787s ago: executing program 4 (id=2188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xab1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4088800) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101000000000000000000000000000000000033000000fe8000000000000000000000000080bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000faa512fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000fe0c0000000000006132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040000004e224e2300000a01010100"/271], 0x154}}, 0x0) 14.952208925s ago: executing program 4 (id=2189): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 14.948959237s ago: executing program 4 (id=2190): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES16], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x6c776b8da5f78525, 0x6, {0x9, 0x21, 0xc, 0x7, 0x1, {0x22, 0xe3b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x83, 0x22, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x8, 0x7}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x10, 0x0, 0x2, 0xff, 0x9}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x10001, 0x0, 0x100, [0xc0]}]}, 0x2, [{0x70, &(0x7f0000000100)=@string={0x70, 0x3, "08368c46bfc883aae13ee375843e84040e6ba9a71a3c81dc65ad48705abbaa4340fd2f97b595d68921f5369cf9f4dc26a7cfc91b957eb5da2083d373d90ea988f8ab26fbe60f2dca35a930ae2ae9d97a9cb91a6c3764a7dfca56bdd996af60f1565436951e35e838ad94a4634842"}}, {0xe9, &(0x7f0000000180)=@string={0xe9, 0x3, "6218d56a13f1c7f5d87630a016b1f5986f92c5137cb705bec69d97d2a6f798ffa6a7e44ed4ead7e73b799c5eab9dad2f65d0e98666a44f761e07a68e242752706164bef0cdf6dcba8fc5b2421b63affd775e63116f92ce81a51ff0610d66a79884e7fedefeacbb25f0f117b8cd2559c2bb1d0840288d87406718a9109f2e1f17a77f66238ebb3a6d5947812d4e664a1a9b8cfcf2b577ddefd39b3e39a5e0f5cf9cc1666544a4e8ce41276d376083376b8085483869717bb392196bb0a6d8e0da4b4daad88f5894dbcadda0294b0fd411040da78417c9ebad4e9be9a3f119aa6613c58090d26ed9"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x40, 0xf, 0xd8, {0xd8, 0x21, "478df41713ff3c4e7bd29f266f6aa7cf8a8e242475a98cbd37125991d40dd867ec08c74524289dcc177a3ea2dce9f7b9cf80cf127fe6dd70af7034991936204450f698b8923f99be7e57279ec44f9bd14848c4928b2c6abb284f0243dedf910f5dad7f26d3df833d7f51eb2205665b216bc0b48e4c3bbaf4257bf7398ec8e61d112702b79a6333089c5a164893dc10c483a505329ac6b8441772c427a1889c9ec1e1399ad2c121e5d1ab66a0ced6c1ad74932cb526a3b85d9e5474c297f1452ef47a8e2c93b2932609491544d9de185021015c091dbb"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "e54e1b8c"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xf9, 0x1, {0x22, 0x5e5}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0x17, 0x97, "58112fd40310a8284764a143c97f6b4acb4472a853b5c833b157e04c41fbb1503ecf4f99b327a809d8861aa5e4b8594aae39004aa8131814646ff4f9da00578a0fe7752fddb43f5f4c59f3fe1a8b5768624e8f82909262f40ad3b70840fec4301c6c4e160393cea227c32df9b83d66ab274be161d87450e111750360b96fd3a064c9c904f122c0bb9809fb176a12ca2d840a271c030840"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xb7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000000600)={0x20, 0x1, 0xed, "e09ed5a1925cbe279f5b7c53207dbde23645ac47b385556eb02f4971a2cb1a4631f932a18b2935638afffd59a35f2ce55dcf844b2341a3cef0453c5e0d8f1515ef2487c16d41c9ecf81337d2a72381eee5d279526d76e393126f92b83cb07d4b25b6daa90f18325c7d7edca001bc232f7ee4f2ca7b1edc498050d7cd911f5fa67c36e4eccafba5e2141a43f916e3c744cd0a1e21022d2d781394007824d73d3e3c86ce176a894c35f1017cdaaecaf4297e8d3eafcd11ee0bc795e9243701e33ba3100843e859b93866914135ab8c1e7cfc7a874fe69104bc91d20c0d691831b95457522866dffe87475b18c185"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x2}}) writev(r2, &(0x7f0000000880)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000000780)="3eeb3f2563d15291b2fe93bab8f3fcdf380795350e02157625297f6cb4d0602741bde30064182e404bf9eb3025594ea6ee4165591ec3d4562e2e56c981b68ffe98e04d908c3663612ba87e6079f6c9d91e97f7f6038c2d43a677a118157bfbb01a9b48a83d87c9cbda58abfc3c1a782a49e15ed96c932a8da0d5ec6444afab012c634e2a1786b58ed9ef9a66e5ae3e02cca23c3df17de818116c2cd4710118db6350d96347bb7787e32a82d1fb44d081812b45dfa8a08908e1a60b1b93f5a6d73c2bacb2b6a932d60d8f5bc7206de13dfd91d5e1d9d0521c2c51682de7ec15", 0xdf}], 0x2) 14.776161762s ago: executing program 3 (id=2192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x20) ppoll(&(0x7f0000000040)=[{r4}, {r4, 0x8040}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x41004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.260469135s ago: executing program 3 (id=2201): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c8808b13dff17461b7fa08a1eb7166f9b37ed01927b2fc26f2f1231399cdd724ffe4b180cc7279a0d4a9902cc2cbaca7b6be697ffcb71a3fd3c61480501da9ad869f73ee02beda5c019db720b99f428cdea669cee5aaf1a8ad99e8d9d8e45c808649b2a7a27f1a566ab4ea9db82f586914f0e5e82910", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000fcffffff00"/28], 0x50) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) write$binfmt_register(r0, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'GPL\x00', 0x3a, '\x00', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x50]}, 0x11e) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(r3, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@x}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@hyper, 0x1}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x72, 0x72, 0x3, [@datasec={0x9, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x9, 0x3}, {0x4, 0x7fffffff, 0x484c}, {0x3, 0x7, 0xff}, {0x2, 0x101, 0x82}, {0x4, 0x4, 0xfff}], "e7a8"}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x800}}]}, {0x0, [0x2e]}}, &(0x7f00000009c0)=""/217, 0x8f, 0xd9, 0x1, 0x2, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x2a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x57}, @jmp={0x5, 0x1, 0x2, 0x1, 0x5, 0x6, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdba}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @generic={0x24, 0x6, 0x4, 0x6, 0x4}, @map_idx={0x18, 0x46d66bc559ec8588, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x41, &(0x7f0000000180)=""/65, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, &(0x7f0000000840)=[0x1], &(0x7f0000000940)=[{0x4, 0x2, 0x4}, {0x1, 0x3, 0xb, 0x8}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 14.212030848s ago: executing program 3 (id=2203): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x50, r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.061346958s ago: executing program 3 (id=2206): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0xffff, 0xfb, 0x7, 0x5, 0x6]}, &(0x7f0000000080)=0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'pim6reg1\x00', 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000180)={0x80, "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"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200440c1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x80) syz_usb_connect(0x5, 0x88a, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x76, 0x25, 0x22, 0x40, 0xcde, 0x26, 0x7a48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x878, 0x2, 0xe, 0x6, 0x40, 0x42, [{{0x9, 0x4, 0x9a, 0x6, 0x8, 0xd5, 0xb9, 0x37, 0x1, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x3, 0x3}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x3, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f, 0xdb}, @generic={0xab, 0x22, "01a1b150f6840b9246f1b972af3a7345f2c67f5293d2a80b6a905dd69ec3c3b8a44dafec08825b294ecafcbac238f842e7eee8943e3f4c8fc779068b40f9ac945a5f141944649ee3e16ae9d829a7e0b68bc1a3ce4a0b8e667dbb2a30376b019dfb5faca600a5cdc7e8a87382d959507b0ebcfef5591c15743b2dadb258a219d4abffb94ff6ba7c96eb61cda0cc8857905cdb02b3db84bb06f282569b670fc6e7d42ddf1acd0d60e2f4"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0xca, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x34, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x8, 0x3, [@generic={0xf0, 0xb, "d2347acf397f88ab90c95c1a799d9fd534aac3865c03e9f3934f7eb2afbd823f5e0bf039f0eaa85f240e16a4b698dd5b7d20256083c799c451bd2fe8d63096a8e0e7d440cbef3fc6ade03c6319c43792f518ef5b1529a8dc9cc74e1d9838c6099ceb3230dca28d60d21a919110116b6bc4b03e6f8ad521929d909ddd4c7bcab286f673ea52f79a5d10933ead5d8251815673c0c469112802e77ad517f6c133b23ae36874b204e0bd0f6256bcf268ce70db33c783b16f4a930ff1490f9751fba1b33aa17abd6585ecd5a89a24dde2006ad8849ad61b9360475117558632272f59e8e74654afbcac5047f92e96ea2d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x7, 0x9, [@generic={0xfc, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x20}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0xf7, 0x5, 0x10, [@generic={0x25, 0x6, "bf7b7853f1691f37bbdaf0972a9e3b638fa956fd10796f7d7a6e9ab6a70cfcbc705cf1"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x458, 0xff, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xcf}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x4, 0x80, [@generic={0x19, 0x6, "3a3f0412cf7b4ee867c99a5e57c095afc869c866b09fde"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd1, 0x6}]}}]}}, {{0x9, 0x4, 0x3c, 0xdc, 0x10, 0xbb, 0x12, 0x28, 0x5, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x1, 0x9d}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x2e, 0x8, 0x94}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x2, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xa, 0x3}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x6, 0x3, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x1d2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x4, 0x4, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1, 0x5, 0x1, [@generic={0x8b, 0x7, "4ed35de7b785e1ea43c84062bc24839f135e2dfa7a9f35c567bd52553cf689cd52419cb20e1b451baf983e6a66834e1ec8c757df69232ecd203cc60d3782dbdb629fff30c805b7d6424de0ffad1f2215ab8f8040c0d2dc4dc5fc131b62ae6f73c2d60723bc0a1312320dd711393114316cb9ab8c61e5a8f5cff1acbfff7ed5a64e19f3a17f5f5045fd"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0xc, 0x8, 0xb, [@generic={0xa1, 0x4, "e1768e9b3a8936258138c5841fbe49514e4dcecd71b130f9a7c585694ae1dca8893b27a6a44fd0a4a9fd49f1277b3d7799ca4166dfe887c4c9fa5a20d3897b88491857bb5d5853fd5afa63e423e92d99b6cebd80b8ae4c8d708328eb5eb8b529515ec2a3252ea8486206fe60c51413eaebbff295b8f13c91b8c804839b99338e06862c0b130837a407837f2e3992d90e2fe29efc2a94fab605242bffef0909"}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0xe, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x1, 0x9, 0x9, [@generic={0x1b, 0x30, "eb8ce297509e438bbe2ebed7d559522d918244e7831433064e"}, @generic={0xb0, 0x8, "e846e6ea2e90b608d1df462cb73a937a82cc3063d58543ab7cfdda968bc4495a109715baab4b643c4f6f6510e0cc8988d894d6dfb44c41910d4d3c791a8aa014946d84f139fa7b3d821bb01c776a8470ee626ced4406de6d67c4b9cd5de22931c72a77b8b87fb86f162fb861456c317183abad12f6557d040102da8cabc3d17b7fc6307259114b8097f068f34052c62e7345b76275a80e17a519532733c33f0edd2bad74be832df8633f822557f4"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0xd3, 0x5}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x10, 0xff, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x6, 0x7, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xc, 0xfc, 0x66, [@generic={0x26, 0x10, "a3aa604f17ff6bfe66301068ea71c2c9d2d25b3764dcef61633bf5a269f323020885fafe"}, @generic={0x101, 0x24, "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"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x6, 0x1f, 0x7, [@generic={0xda, 0x23, "93f1cf8030577449cd0f60ba1b56abda5f263ade018816edf2f5cd2e80e39ce321d7b4dd53313066697af9232de36e8b5835d771d8fb64787556448979e51e6a2b1579c9088af0fd064f66c97d49b8ade82cb728277b7856864eaed38208fbc52b9e0e35ffe08601424bb133610c55118a6bea138f684a57521453d19f33279af7619d549db8bd7910a6fd9c4af32d8b35714c5461734336c2d0e2febe1d89742b5b5fbc3c7e57636d17bfd2793baaf3d48f21cbebd3a2552698d2a033d3769fa629f2b74a87c1c60d68b9bde789a5c772ad92d1fb1e0528"}, @generic={0x72, 0x22, "d83f45f87a7856b3c7bbc8b9bd176ecf2d5eb139a57ec3678f48e61192527a32b7178ca43763c419cb041ace8e8afc4aad369c30cf4757df48333f712305c86ea331f896166564054f5530c3d1e9d7bfe62a5daedba7443f127f820a60438ff6f608ecb9ba735527737ee79b29ba29a0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xd5, 0x2, 0x4}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x300, 0x4, 0x10, 0xfc, 0x196, 0x4}, 0x5, &(0x7f0000000f00)={0x5, 0xf, 0x5}, 0x9, [{0x67, &(0x7f0000000f40)=@string={0x67, 0x3, "84798399d46699b9d46eb6d6910cece277406ac819a2ca96b10c0bbc961ea93ef31f82c854109297dfb3e5ef8718c9bce6b38e67066a83b8f2186352b1799d5a55b74388e95677eb86c8ca97fa706e8337f079cfe596854eb6afa1e34bf0d98f2e1e85b593"}}, {0x83, &(0x7f0000000fc0)=@string={0x83, 0x3, "7c08cb2f283b98a399492a5b9cc2305e9ae36d76da19eef860a1e104b87b3b4f2d5f4c69bf818442253d2f36bc92a41b955c29134b7ae89cd1c8e0a0fcb7e72b143db4eecbf66df2167b910cc88f7fc8ce06125dc518879c6272320a55fc07a0be00b34f8ccc6aab4f9f56057323d5282c45022542b19791aa3b8ea2c38420fa14"}}, {0xc7, &(0x7f0000001080)=@string={0xc7, 0x3, "62f77ae1a9c8dcd629a21acd021090a90f7165306f85ab6876d37b30208c999f4e5618b6c16f5efa56280b6e940a1d92e0138b5ef5a4d83ce2066e7e00cde17920f1dda052c93bedf69cf06446ea85e17bb82dca12f93e12dabe0337f506a0362df5ea16ff88fca0de3e135258c07dd63df5d70275ad0832e088aabfe9740184d2157f80ab6816bd3a5251f45e7ff6e3035161b0b7fa89fb73690318a7d40623ffff8bb31b14bbcf07e08791236535c49b53d1af3979e4f22ed4eadcb3095b7fb95ac0d790"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x7, &(0x7f0000001200)=@string={0x7, 0x3, "f3f2ed2da4"}}, {0xde, &(0x7f0000001240)=@string={0xde, 0x3, "9b92fca50128005ee9c15a3155dac30ab405d509c8f7da0e88dadef6c46dad256708c570d81f4e1098d59815577532c5b0f9eca3886192c750ff841028a19f09dd9d34e42d36b5d94e7a22524696b2bc75088db3ffcfcbbd1e123b34aaf53ce5bfd1ea7f384d0daa29e602aaf9cb820571f89fe0508ae4a807e419ffb2a449c3e59fd2a1eb0e85fffda194387e800124afb08fbf7d9842d10f9415a45f45a3f517a7bdf0a54043ba3fec4541de92b2f4a455ded4903d00f6711f42d80d283bdd9792b8671b3bb27b13d7bcb592452f5cda4388740992ff4298d27781"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x3001}}, {0xe4, &(0x7f0000001380)=@string={0xe4, 0x3, "9ba1cfb836cd8d98899d3f0f53150e429e052c850da9cbf6d6c4c079ed5cef132351871111ec256a5e3dfb33deaabaa43cad1720a79b155c484dd943044085897f2a1d3608090fe796c239d1a611d4d7353cac134d03226ca0b7c7757daf51f111901e05966dedba26a5401066ef8333bd7a0c7ad6a1d3631d67c4a7e4b873f3a0e64b573e59eda6d377690d7921fbd22da43d64783dfbe6e4fdecda49a92d600e4b22b11b10434d58344ad041269677fbd279d1b4c51720507ac867512edc9399fa1b03a9af7cd78309a205b3957d7c26c0ad6b450fbf0cd2e681f5309dcc2bf792"}}]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000001540)=@t={0x85, 0x8, 0x94, 0x4}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) syz_usb_connect$uac1(0x1, 0xfd, &(0x7f00000016c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x7, 0x0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xab}, [@processing_unit={0x7, 0x24, 0x7, 0x5, 0x5, 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0xff, "c575f5cb18"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x8, 0x6f, "cb86", "8274"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x9, "bd582b0de185d82140"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x4, 0xff, "8e6d345dc2b5c0"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x8, 0x9}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1c, 0x2, "8e0cbe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x81, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x87, 0x69, 'V', 'w'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0x72, 0x1, "af953b5a00ec34da14"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x3, 0x4, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x4, 0xb, 0x1, "a4530dd3f37532b4b4"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xe5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x208, 0x3, 0x81, 0x2, {0x7, 0x25, 0x1, 0x2, 0x66, 0x9}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x300, 0x6, 0x0, 0x10, 0xcf, 0x1}, 0x2d, &(0x7f0000001800)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x9, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "36e2f77b8dba65644d7dfacd8f955118"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x23, 0x9, 0xe}]}, 0x5, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x240a}}, {0x96, &(0x7f0000001880)=@string={0x96, 0x3, "08362d2a06208e53acfa087b4768cc9f8f87668520c6a55bf3692521684e1758218f17ce8e78e965db6edc53ae4e678508ae23deeb6284bf714612d4b462fada8d3567bf2ff2bffc2f99fc691290568f610057e9ff1706d77c723085d63f06556865f92f83bfa57f826ee1907b965841c01f277cdf9dc2ebbf97e130e2265d864df483e253593ed60b3cefb24f7479511b8d042b"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x3c01}}, {0x79, &(0x7f0000001980)=@string={0x79, 0x3, "c69df53a0940c4e26c8177b81d659e785fde7b85bb80e64d1207204b1e08f486a3730c5c11899de8178e2e7f7e0f37c4ab93510e4d8eb12a402c5a49d317a88ce1df00e6daa0b96a1e7b15e1e4933bf3fab63ce9a6897ef4bb1ebc38662cda082ac6118a4ab64f849c49f9c703755b8e54e9928d0c8417"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x2401}}]}) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000001e40)={0x2c, &(0x7f0000001bc0)={0x40, 0x5, 0xbb, {0xbb, 0xb, "50ab1c2871d16364a241fe26ff0ed7b96bcb54eb7b9e83909298f5b42296455568b7b7ff1f2769491ae6c092a91c85b0ef3b88fc91b0238402758cbacb0bd603291772d77fc5426101826cccac38a41204b63399bba184b266cb75f1b3763234c847034474adfc9d8568375e5a684bf8d9ecb92103f2999f2b33b748c0d1bac41e2281b16a7f7d85f15805a9aa537580fc77e8ea2c5c995d54a41db789d73a7484b8d59ac692658fc63f37017d6cd44841c9bf60f03a05ecdd"}}, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000001d00)={0x0, 0xf, 0xb6, {0x5, 0xf, 0xb6, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x2b, 0x6, 0x4, 0xf0f, 0x3ff, [0xffc0c0, 0xff3f00, 0x7f4000, 0xf, 0xf, 0xf0]}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7, 0xf, 0xffff}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0xc76, 0xf0f, 0x9, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x1}, @generic={0x67, 0x10, 0x3, "091114579395bd1647996d22f46c217bcad61cd5d4ee76b2d363345b554679b3a2ce5f822085615becb4d61b717ad7ed036b0b75d7e041841948a7a104b1d758b226e45c9562c4407502a9e8f2e35f93e70264445fb6d1fd8dce35e3b0f24cc002fbeaa5"}]}}, &(0x7f0000001dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x9, "c8a28577", "a0755e66"}}, &(0x7f0000001e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x3, 0x7, 0x9, 0x9, 0x3, 0x8}}}, &(0x7f0000002280)={0x84, &(0x7f0000001e80)={0x40, 0x7, 0x1, 's'}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f80)={0x20, 0x0, 0x4, {0xe0, 0x80}}, &(0x7f0000001fc0)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000002000)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002040)={0x40, 0xb, 0x2, "279d"}, &(0x7f0000002080)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000020c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002100)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002140)={0x40, 0x19, 0x2, "d7a8"}, &(0x7f0000002180)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f00000021c0)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000002200)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002240)={0x40, 0x21, 0x1, 0x83}}) socket$unix(0x1, 0x5, 0x0) r6 = accept4$inet(r0, &(0x7f0000002340)={0x2, 0x0, @initdev}, &(0x7f0000002380)=0x10, 0x81c00) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1808}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x60, r7, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@ibss={0x6, 0x2, 0x4}, @dsss={0x3, 0x1}, @challenge={0x10, 0x1, 0x72}, @chsw_timing={0x68, 0x4, {0x7, 0x6}}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1e, 0x24, [{0x6, 0x1}, {0x48, 0x1}, {0x5}, {0x2, 0x1}, {0x30}, {0x6c, 0x1}, {0x24, 0x1}, {0x24, 0x1}, {0x4}, {0x6}, {0xc}, {0xc, 0x1}, {0x2, 0x1}, {0x36, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xc}, {0x30}, {0x1}, {0x18, 0x1}, {0x30}, {0x3}, {0x6, 0x1}, {0x4}, {0x6}, {0x9, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002580), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x70, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'gre0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040841) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000027c0)={0x6, 0x3, 0x4}) r9 = syz_open_pts(r1, 0x400) ioctl$KDGKBMETA(r9, 0x4b62, &(0x7f0000002800)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002840)='./binderfs2/binder-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000002a80)={0x0, 0x93, "71e298f31e65edcc4127300a061c882808d878757520a7a6fca61329ed7b193cd8d7694d51e3881a7047c71199f1f20bea5689b599225f1348b8fdf912cb52fddfcf3f921c64f679b8556e57b2a448f446c509ddde244c6bbd707d7d3974b567a7750e409589a8bbfa0d601a895f00c8679b2259b9e2cd008ff971df6fb0279e62ce305f16bd9822d497257f0ba25aafc8b5f6"}, &(0x7f0000002b40)=0x9b) sendmmsg$inet_sctp(r1, &(0x7f0000002e80)=[{&(0x7f0000002880)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c, &(0x7f0000002a40)=[{&(0x7f00000028c0)="e5b47bd0b8752fac3fac89d35ac9da655df54cfd64d0600c69288f1f42e3647f96f772957e36915cf0eb58c9e9caa57cdc5dd94c8ab46afcb35dd1e39c2481259899a6d7cb8f1b219331ffefca12239d6a12de7beac767e63b7f9462048354175b6cb39a698c1cf31544846339a3be272d5a367b733183924ca0f93d58ce6fe15aa87254", 0x84}, {&(0x7f0000002980)="f37a665a781e3a4bf17b18576e179193d369f8a91b35799eeb4d", 0x1a}, {&(0x7f00000029c0)="7336819836de1ad05a0f48a6036722aec6bdc929ddc72a86601dc9cdd89df2781e9ec1ca4ddc914cc8e1dfd40d5c3723c5434fa874cb185c704e15c269a3f17f762d916ff3f7ccd8809acdef9c17b0486b1cada86bfb2b8d9e7d8869627441538ae4f0", 0x63}], 0x3, &(0x7f0000002b80)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @authinfo={0x18, 0x84, 0x6, {0xbf96}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x31, 0x103, 0xc71d, 0xd1b6, r10}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0xa8, 0x801}, {&(0x7f0000002c40)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002c80)="daac3774b567a698fef57586fc7852b517e8009d7d7d1ad7e7fb909f1fbdc2318f047431a3015a0b6881611da78df1005412e16efd4bacf83e39a8edee43dc0509489934967195bb86063895e6d6a8504d4af11e72382bca46cfb37c9043e61265dbcd07d59537aabb3ad8683f874345100e858f13b4e3ff77586ccc52d4379f76ddfb617a260ee6212edbecee3de08641a2ee796d444fe44a80c87cebebd4d8d461c8c3d0b4bf3b6fad2081fc196f3de6d6c8ec94", 0xb5}, {&(0x7f0000002d40)="d19f1e2a760f2894087877c38dc0e198fe45b6f3b3c92b7403f71c1fa62c7a517b29f8b7bf348665fa71899d9da96324fca446423d5007e859726369382d61c77ac5a0f8ebffabbe4f7b7142c2e1096cb25ab046b6ce1dea51f25c7fdfd1154e04fa2103257901bb188c2a5428616e2444060c3194ea13a13b378d56a4c5bb2a457989752b4e402c", 0x88}], 0x2, &(0x7f0000002e40)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x30, 0x9000}], 0x2, 0x8010) 14.061099928s ago: executing program 1 (id=2207): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) mmap(&(0x7f00001b4000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400ef0300000000000000004242be3b25640a35e7e3cc7627a6394f4d56aac03877bede2f09e5103d55b90aae095bd032a130408bb4d28915a9af23e25d6918cc208b3d3a84bc81ad2c746225566164673859547287fe938e8a8f5eba49727fac1474527154e872dddc2586b43b586b1ec4752535e618c66b4c5ccc44b2adcfe13a74a9dbc65568ef411243b9cd36a0683b22b2491789fdd5ab9e46fc7bb0d46ca82a029c365b4e3d885b2cd09ad09339945127b460e97f0ffe0156b5f917891ea5da2bc2e209bfffff471b1eb90e60965f23a5463a60cc46d845e879a91202ca0bae6a64bdb88325ed983b", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x7101}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0x7}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r12 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r12, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000580)=0x1, 0x34) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13.752046265s ago: executing program 1 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970503, 0x20c0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) socket$kcm(0xa, 0x2, 0x0) 13.751637597s ago: executing program 1 (id=2209): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) r1 = syz_open_dev$video4linux(&(0x7f0000000740), 0x7, 0x121402) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x8000006, 0x8}) statx(r0, 0x0, 0x1000, 0x10, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(morus640,cmac(arc4)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0294a68b36d2bd8}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x18) read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) 13.499716578s ago: executing program 4 (id=2213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r1, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339bc2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebc631d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c0100000000000000a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x7, &(0x7f0000001100)=0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002dbd7000fbdbdf250000000024000300a0cb879a47f5bc644c8934027a44e071bda8160e693fa6d031c74a1553b6e901"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x40040) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="0250"]) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r4, &(0x7f0000000540)="8bb3689fbf18", 0xfdef, 0x6}]) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x8, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc008551b, 0x0) 12.851652682s ago: executing program 1 (id=2224): syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r1) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x64}}, 0xd4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') 206.945922ms ago: executing program 1 (id=2227): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) io_uring_setup(0x5632, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x7, 0x20002f7}) 206.41144ms ago: executing program 0 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0xa1) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={0x0, 0x0, 0x30, 0xa5f, 0x1}, &(0x7f0000000080)=0x18) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x4040014) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$sock(r3, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0xa1) (async) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={0x0, 0x0, 0x30, 0xa5f, 0x1}, &(0x7f0000000080)=0x18) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x4040014) (async) 206.299442ms ago: executing program 0 (id=2230): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f04000/0x1000)=nil, 0x1000, &(0x7f0000000000)) 206.210155ms ago: executing program 0 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x7fff, 0xb, 0x4, 0x401, 0x9, 0x4, 0x9, 0xffff7074}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000e1ffffff300000000e0001006e657464657673696d0000000f00020039657464657673696d30000008000300010000009a76b8552a0092ee578117167631482ea403861ff891e47fe23dbcceb557e3f609001152137595fb86a85b9e136d9d0954903cb1217f0622d15f07f5a313538a7b39481047973c13bcdbb333810efb936dd8116eeadd58d077975472547e1ca85b4ea11c0e8da982dbd08c14d28ddc55e941a78dba0080ea9fa5f1123462b83f3eceabffec1f46adb7695d88697379a2fd5e28e573939741b4fd1374f7a9"], 0x3c}}, 0x48800) 141.496837ms ago: executing program 0 (id=2232): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000e35c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000e37c0)={{0x0, 0xb673, 0x7, 0x5, 0x7, 0x7fffffffffffffff, 0x7, 0x401, 0x4, 0x1, 0xe9d, 0xb56, 0x8, 0x8, 0xaa0a}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000e3840)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e4840)={0x2d0, [{}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x6, "b25d026d1db008"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000e5840)={0xecf6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "e16b2bfdc736de"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000e6840)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0xb, "dfe1701d5667ff"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e7840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6}, {r8, r12}, {r15, r16}], 0xff, "dd3c823c9ee46c"}) (async) r17 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r18 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000c80)=ANY=[@ANYBLOB="88020000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100010008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000b47000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000007aa00140a987921f050009000b00000008000400bc00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008f610000"], 0x288}, 0x1, 0x0, 0x0, 0x4000}, 0x4048801) (async) sendmsg$NL80211_CMD_SET_STATION(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008800) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r19], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r20 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r20, 0x1, 0x25, &(0x7f00000000c0)=0x110, 0x4) sendmmsg(r20, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r20, &(0x7f0000000380), 0x1, 0x2002, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 141.342516ms ago: executing program 1 (id=2233): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0x9, {0xac54, 0x0, 0x9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 137.394499ms ago: executing program 4 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30b8fb058ec066b8000000000f23d80f21f86635000000500f23f8660fc77706660f38800a260f23a5360fc7350f01c50f9dcff2aa", 0x44}], 0x1, 0x51, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x400, 0x34, 0x21}, 0x18) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x8, 0x9, 0x5, 0x20, 0x3, 0x2, 0x6, 0x7, 0x6, 0xc9, 0x2, 0x2, 0x2, 0x7, 0x9, 0x80}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0x9, 0x0, 0x0, 0x3, 0x0, 0xdd, 0x8, 0x7f, 0xa7, 0x7, 0x8, 0x0, 0x9, 0x0, 0x1, 0x3, 0x9, 0x53, '\x00', 0x2, 0x1}) 136.533017ms ago: executing program 3 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, 0x0, 0x0, 0xfffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000070000000900000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001000000000000000000000000000000000000000000000e8fe3d8583c3bfcfd8c5e207bdc38c814e0ce0a5ff6d17a5decdf6e9e30c9e0b472d756ca59cc08f5419855e77fcca8408bc479dd26deceaa606000000dc8cbdb248a1c58760d30180000000000000b02418f9a27ae204c260c701581d90db742c9925ecca31bb3d3b01870cec7148ac85cbc46ce22d8bec6d29b9f6a9c06b1147321a3c5e19b890f0a434e2bf9f854b02ba91e1234a88687248a925c1d5f0478e48bd62f6724a4b9fef067dea36bc28f30d11114dcb80ce6dc26b5476cc4b0450b32e7326961353f1db36dbb99717"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) close(r5) (async) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000080)}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x9f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xde, 0xff5, &(0x7f0000000440)="d809cc5b8b5c83a51b209aa603327b6de08c9a2b2567f060ccc3caa2accb553e217d3b91dfff07268f40d94cec6554fa429394cf98aba5eeced8f5601da6c8fe1a1428b0a18aee2449b85217a5b923b7779ca48d8a072656f9615b930c2de17e760a7b9bef3a36f2a2addb1aa6959d3a5decc90488488a5c5d1b1004aa6446b149dfc5d9b1b9e340551ce546aa51f0d51fd2312b7dca15687bb60aa1301728a8d695b59a4b1a4bcf1f937aafe9662d69356e97d1191fac01cd7739c9a3ec3cc86720fb23e6217c768f0094d712e3b5005247e72c7db0e9167b7a8079ad17", &(0x7f0000001200)=""/4085, 0x2, 0x0, 0x67, 0xd1, &(0x7f00000000c0)="6b34096a18a5b42ce66a6359568850d4bb184675ce015b267b21188ffe7ed956d74df8f4f203bd7f13007f2be12d7d8c2721e6977bb4b66ec41edf8d4c50cd702c8d2bae249059c89b78b8605ec8d122e561cb58a4b7fa3cf1f389d08ed3eae1433601992c8983", &(0x7f0000000680)="2d16e2978bf201de36af0d7591b00a578b230e6a8e29e5b553ec85934ac9211a158adb206a1eb947dd461af7a0725ecdb0529858cc9becf555eebc713bc5d55e29efc410e117ade28aac248b58fc3bb5edb49d01e6c5d940789277173187ce25e78da14ced044bf37595122faa05a8284878a98b3f595d227651b2933054f9d95389ddf8b16a77c933ad9017fa854241c43827f7de92ad24225e225c2b83bbcc7b60993d0a301b3fc5361863732cc4b2eb325ebc725211d1d27e882bfffba57f342f01621d1c4508b6adb987aca63cd832", 0x4, 0x0, 0x8001}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xde, 0xff5, &(0x7f0000000440)="d809cc5b8b5c83a51b209aa603327b6de08c9a2b2567f060ccc3caa2accb553e217d3b91dfff07268f40d94cec6554fa429394cf98aba5eeced8f5601da6c8fe1a1428b0a18aee2449b85217a5b923b7779ca48d8a072656f9615b930c2de17e760a7b9bef3a36f2a2addb1aa6959d3a5decc90488488a5c5d1b1004aa6446b149dfc5d9b1b9e340551ce546aa51f0d51fd2312b7dca15687bb60aa1301728a8d695b59a4b1a4bcf1f937aafe9662d69356e97d1191fac01cd7739c9a3ec3cc86720fb23e6217c768f0094d712e3b5005247e72c7db0e9167b7a8079ad17", &(0x7f0000001200)=""/4085, 0x2, 0x0, 0x67, 0xd1, &(0x7f00000000c0)="6b34096a18a5b42ce66a6359568850d4bb184675ce015b267b21188ffe7ed956d74df8f4f203bd7f13007f2be12d7d8c2721e6977bb4b66ec41edf8d4c50cd702c8d2bae249059c89b78b8605ec8d122e561cb58a4b7fa3cf1f389d08ed3eae1433601992c8983", &(0x7f0000000680)="2d16e2978bf201de36af0d7591b00a578b230e6a8e29e5b553ec85934ac9211a158adb206a1eb947dd461af7a0725ecdb0529858cc9becf555eebc713bc5d55e29efc410e117ade28aac248b58fc3bb5edb49d01e6c5d940789277173187ce25e78da14ced044bf37595122faa05a8284878a98b3f595d227651b2933054f9d95389ddf8b16a77c933ad9017fa854241c43827f7de92ad24225e225c2b83bbcc7b60993d0a301b3fc5361863732cc4b2eb325ebc725211d1d27e882bfffba57f342f01621d1c4508b6adb987aca63cd832", 0x4, 0x0, 0x8001}, 0x50) write$char_usb(r7, &(0x7f0000000340)="60136fa7812c3b2609c935a3e226342738b11a6bf87367bfb08de171a8973db0d276f5585938ce37fec06599de59e5a6ea290639587504fbaea0f7513c16e3761890823ff7ab8e1745736036835cdf2e98c96c22f93adf749574c3cecb44aca8507592bfcf7ba067f2ffb2f3e57d3121fa11665b6d44b2d3e7cad14707cbea378f116e816d77b35af3bcf49190801c7308900b7b41656318323319b8189f3fc773e07abe227af2a631e4a76306c69fb05774edd97925056843f2df3a2b7cf2c4667e1b8f1adb5b1640f0477f0430afbf061992f8a3e7af7ba5876bc5f9c337c14c0c3e7e56486bdc3d", 0xe9) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4, @ANYBLOB="200c0100fcef9071e8000500"], 0x20}}, 0x4084) 62.170051ms ago: executing program 0 (id=2236): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xddc42, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, 0x0) 0s ago: executing program 0 (id=2237): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000280)='source', 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x7, [0x2], [0x80ffff, 0x0, 0x2], [], [0x400000000000001]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x141}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector}, 0x94) accept4(r2, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80, 0x80800) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) fsopen(&(0x7f0000000340)='afs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000280)='source', 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x7, [0x2], [0x80ffff, 0x0, 0x2], [], [0x400000000000001]}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x141}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector}, 0x94) (async) accept4(r2, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80, 0x80800) (async) kernel console output (not intermixed with test programs): 27491][T10909] ? alloc_fs_context+0x677/0xf50 [ 143.527504][T10909] path_mount+0x76e/0x23a0 [ 143.527514][T10909] ? rcu_is_watching+0x12/0xc0 [ 143.527526][T10909] ? __pfx_path_mount+0x10/0x10 [ 143.527535][T10909] ? kmem_cache_free+0x2d8/0x770 [ 143.527546][T10909] ? putname+0xf5/0x1a0 [ 143.527564][T10909] ? putname+0xf5/0x1a0 [ 143.527577][T10909] ? putname+0xf5/0x1a0 [ 143.527594][T10909] ? __x64_sys_mount+0x293/0x310 [ 143.527603][T10909] __x64_sys_mount+0x293/0x310 [ 143.527612][T10909] ? __pfx___x64_sys_mount+0x10/0x10 [ 143.527626][T10909] do_syscall_64+0xcd/0xf80 [ 143.527642][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.527652][T10909] RIP: 0033:0x7f989358f7c9 [ 143.527661][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.527670][T10909] RSP: 002b:00007f98944f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.527680][T10909] RAX: ffffffffffffffda RBX: 00007f98937e5fa0 RCX: 00007f989358f7c9 [ 143.527686][T10909] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 143.527692][T10909] RBP: 00007f98944f0090 R08: 00002000000004c0 R09: 0000000000000000 [ 143.527698][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.527703][T10909] R13: 00007f98937e6038 R14: 00007f98937e5fa0 R15: 00007ffd47d29e58 [ 143.527717][T10909] [ 143.535778][T10911] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 143.633227][T10912] block nbd0: NBD_DISCONNECT [ 143.635278][T10912] block nbd0: Send disconnect failed -32 [ 143.643831][T10911] erofs (device loop0): cannot find valid erofs superblock [ 143.650832][T10911] __nla_validate_parse: 1 callbacks suppressed [ 143.650848][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 143.693302][T10919] JFS: discard option not supported on device [ 143.695449][T10919] Mount JFS Failure: -5 [ 143.834321][T10936] netlink: 'syz.2.1466': attribute type 4 has an invalid length. [ 143.837681][T10936] netlink: 'syz.2.1466': attribute type 4 has an invalid length. [ 143.862614][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.866475][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.870972][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.875030][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.876418][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.877613][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.881337][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.883052][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.886191][T10946] overlayfs: invalid origin (0000) [ 143.889005][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.889451][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.891099][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.894800][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.894882][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.894890][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.896896][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.900676][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.903484][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.905736][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.905814][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.905819][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.905858][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.905862][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.905900][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.905904][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.905967][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.905971][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906009][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906013][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906050][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906055][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906092][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906096][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906152][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906156][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906194][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906198][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906234][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906239][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906275][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906279][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906331][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906335][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906372][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906376][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906412][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906417][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906453][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906458][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906508][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906512][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906548][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906553][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906592][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906596][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906632][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906636][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906686][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.906691][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.906727][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 143.909647][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.912697][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 143.915065][T10942] binder_alloc: binder_alloc_mmap_handler: 10940 200000ffd000-200001000000 already mapped failed -16 [ 143.933718][T10941] binder_alloc: 10940: binder_alloc_buf, no vma [ 143.934706][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 144.028022][T10943] binder: 10940:10943 ioctl 4018620d 200000004a80 returned -16 [ 144.035323][T10960] FAULT_INJECTION: forcing a failure. [ 144.035323][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 144.039430][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.1.1474 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.039447][T10960] Tainted: [L]=SOFTLOCKUP [ 144.039450][T10960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.039456][T10960] Call Trace: [ 144.039460][T10960] [ 144.039464][T10960] dump_stack_lvl+0x16c/0x1f0 [ 144.039482][T10960] should_fail_ex+0x512/0x640 [ 144.039492][T10960] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 144.039508][T10960] should_failslab+0xc2/0x120 [ 144.039522][T10960] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 144.039535][T10960] ? ovl_parse_param+0x6f0/0x15a0 [ 144.039550][T10960] ? kstrdup+0x53/0x100 [ 144.039560][T10960] kstrdup+0x53/0x100 [ 144.039570][T10960] ovl_parse_param+0x6f0/0x15a0 [ 144.039585][T10960] ? __pfx_ovl_parse_param+0x10/0x10 [ 144.039597][T10960] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 144.039611][T10960] ? static_key_count+0x5a/0x70 [ 144.039624][T10960] ? __pfx_ovl_parse_param+0x10/0x10 [ 144.039636][T10960] vfs_parse_fs_param+0x20b/0x3c0 [ 144.039648][T10960] vfs_parse_fs_qstr+0x138/0x1c0 [ 144.039658][T10960] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 144.039672][T10960] ? ovl_next_opt+0x143/0x1c0 [ 144.039684][T10960] ? __pfx_ovl_next_opt+0x10/0x10 [ 144.039694][T10960] vfs_parse_monolithic_sep+0x18d/0x210 [ 144.039706][T10960] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 144.039717][T10960] ? alloc_fs_context+0x677/0xf50 [ 144.039730][T10960] path_mount+0x76e/0x23a0 [ 144.039740][T10960] ? rcu_is_watching+0x12/0xc0 [ 144.039752][T10960] ? __pfx_path_mount+0x10/0x10 [ 144.039761][T10960] ? kmem_cache_free+0x2d8/0x770 [ 144.039772][T10960] ? putname+0xf5/0x1a0 [ 144.039789][T10960] ? putname+0xf5/0x1a0 [ 144.039803][T10960] ? putname+0xf5/0x1a0 [ 144.039819][T10960] ? __x64_sys_mount+0x293/0x310 [ 144.039828][T10960] __x64_sys_mount+0x293/0x310 [ 144.039838][T10960] ? __pfx___x64_sys_mount+0x10/0x10 [ 144.039852][T10960] do_syscall_64+0xcd/0xf80 [ 144.039867][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.039878][T10960] RIP: 0033:0x7f26c9f8f7c9 [ 144.039887][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.039896][T10960] RSP: 002b:00007f26cadb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.039906][T10960] RAX: ffffffffffffffda RBX: 00007f26ca1e5fa0 RCX: 00007f26c9f8f7c9 [ 144.039912][T10960] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 144.039918][T10960] RBP: 00007f26cadb6090 R08: 00002000000004c0 R09: 0000000000000000 [ 144.039924][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.039929][T10960] R13: 00007f26ca1e6038 R14: 00007f26ca1e5fa0 R15: 00007ffec428e498 [ 144.039942][T10960] [ 144.074358][T10962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1475'. [ 144.482409][T10999] bond2: invalid ARP target 0.0.0.0 specified for addition [ 144.486873][T10999] bond2: option arp_ip_target: invalid value (0) [ 144.493048][T10999] bond2 (unregistering): Released all slaves [ 144.541450][T11008] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 144.543231][ T5966] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 144.648163][T11014] qnx6: unable to set blocksize [ 144.685362][T11028] FAULT_INJECTION: forcing a failure. [ 144.685362][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 144.690962][T11028] CPU: 3 UID: 0 PID: 11028 Comm: syz.3.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.690991][T11028] Tainted: [L]=SOFTLOCKUP [ 144.690997][T11028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.691007][T11028] Call Trace: [ 144.691013][T11028] [ 144.691019][T11028] dump_stack_lvl+0x16c/0x1f0 [ 144.691048][T11028] should_fail_ex+0x512/0x640 [ 144.691062][T11028] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 144.691087][T11028] should_failslab+0xc2/0x120 [ 144.691111][T11028] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 144.691131][T11028] ? kasan_quarantine_put+0x10a/0x240 [ 144.691149][T11028] ? ovl_do_parse_layer+0x33/0x1290 [ 144.691175][T11028] ? kstrdup+0x53/0x100 [ 144.691191][T11028] kstrdup+0x53/0x100 [ 144.691208][T11028] ovl_do_parse_layer+0x33/0x1290 [ 144.691229][T11028] ? ovl_mount_dir+0x15a/0x1f0 [ 144.691252][T11028] ovl_parse_param+0xdd9/0x15a0 [ 144.691278][T11028] ? __pfx_ovl_parse_param+0x10/0x10 [ 144.691298][T11028] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 144.691322][T11028] ? static_key_count+0x5a/0x70 [ 144.691342][T11028] ? __pfx_ovl_parse_param+0x10/0x10 [ 144.691364][T11028] vfs_parse_fs_param+0x20b/0x3c0 [ 144.691383][T11028] vfs_parse_fs_qstr+0x138/0x1c0 [ 144.691401][T11028] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 144.691425][T11028] ? ovl_next_opt+0x143/0x1c0 [ 144.691444][T11028] ? __pfx_ovl_next_opt+0x10/0x10 [ 144.691463][T11028] vfs_parse_monolithic_sep+0x18d/0x210 [ 144.691482][T11028] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 144.691501][T11028] ? alloc_fs_context+0x677/0xf50 [ 144.691523][T11028] path_mount+0x76e/0x23a0 [ 144.691539][T11028] ? rcu_is_watching+0x12/0xc0 [ 144.691558][T11028] ? __pfx_path_mount+0x10/0x10 [ 144.691575][T11028] ? kmem_cache_free+0x2d8/0x770 [ 144.691593][T11028] ? putname+0xf5/0x1a0 [ 144.691621][T11028] ? putname+0xf5/0x1a0 [ 144.691642][T11028] ? putname+0xf5/0x1a0 [ 144.691669][T11028] ? __x64_sys_mount+0x293/0x310 [ 144.691684][T11028] __x64_sys_mount+0x293/0x310 [ 144.691701][T11028] ? __pfx___x64_sys_mount+0x10/0x10 [ 144.691724][T11028] do_syscall_64+0xcd/0xf80 [ 144.691749][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.691766][T11028] RIP: 0033:0x7f740c18f7c9 [ 144.691780][T11028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.691796][T11028] RSP: 002b:00007f740d095038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.691818][T11028] RAX: ffffffffffffffda RBX: 00007f740c3e5fa0 RCX: 00007f740c18f7c9 [ 144.691828][T11028] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 144.691838][T11028] RBP: 00007f740d095090 R08: 00002000000004c0 R09: 0000000000000000 [ 144.691848][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.691857][T11028] R13: 00007f740c3e6038 R14: 00007f740c3e5fa0 R15: 00007ffc46adac08 [ 144.691881][T11028] [ 144.715115][ T5966] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.734646][T11016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1493'. [ 144.739901][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.815278][ T5966] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.818602][ T5966] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.821186][ T5966] usb 7-1: Manufacturer: syz [ 144.825452][ T5966] usb 7-1: config 0 descriptor?? [ 144.859503][T11039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 144.883312][ T5966] rc_core: IR keymap rc-hauppauge not found [ 144.885339][ T5966] Registered IR keymap rc-empty [ 144.887287][ T5966] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 144.892113][ T5966] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 144.950487][ T40] audit: type=1400 audit(1768930991.550:653): avc: denied { connect } for pid=11053 comm="syz.3.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 145.052274][ T5966] usb 7-1: USB disconnect, device number 32 [ 145.086770][T11061] futex_wake_op: syz.0.1505 tries to shift op by 32; fix this program [ 145.090385][T11061] netlink: 'syz.0.1505': attribute type 3 has an invalid length. [ 145.124364][T11064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 145.127270][T11064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.130423][T11064] vhci_hcd vhci_hcd.0: Device attached [ 145.190393][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 145.200286][T11068] syzkaller1: entered promiscuous mode [ 145.202629][T11068] syzkaller1: entered allmulticast mode [ 145.207933][ T40] audit: type=1400 audit(1768930991.810:654): avc: denied { read write } for pid=11067 comm="syz.3.1507" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.216057][ T6025] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 145.216195][ T40] audit: type=1400 audit(1768930991.810:655): avc: denied { open } for pid=11067 comm="syz.3.1507" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.325664][ T40] audit: type=1400 audit(1768930991.930:656): avc: denied { bpf } for pid=11069 comm="syz.3.1508" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.333062][ T40] audit: type=1400 audit(1768930991.930:657): avc: denied { perfmon } for pid=11069 comm="syz.3.1508" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.339173][ T40] audit: type=1400 audit(1768930991.930:658): avc: denied { module_request } for pid=11069 comm="syz.3.1508" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 145.373235][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 145.373258][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.374700][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.374725][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.374744][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.374760][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.374790][ T6025] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.374805][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.382120][ T6025] usb 6-1: config 0 descriptor?? [ 145.403315][ C2] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 145.466855][T11082] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 145.469391][T11082] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.472458][T11082] vhci_hcd vhci_hcd.0: Device attached [ 145.482211][T11083] vhci_hcd: connection closed [ 145.482519][ T225] vhci_hcd vhci_hcd.3: stop threads [ 145.486515][ T225] vhci_hcd vhci_hcd.3: release socket [ 145.488581][ T225] vhci_hcd vhci_hcd.3: disconnect device [ 145.543207][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 145.546000][ T29] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 145.550025][ T29] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 145.553567][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.557225][ T29] usb 5-1: config 0 has no interfaces? [ 145.559740][ T29] usb 5-1: config index 1 descriptor too short (expected 8192, got 18) [ 145.562467][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.566552][ T29] usb 5-1: config 0 has no interfaces? [ 145.571047][ T29] usb 5-1: config index 2 descriptor too short (expected 8192, got 18) [ 145.574453][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.578011][ T29] usb 5-1: config 0 has no interfaces? [ 145.581964][ T29] usb 5-1: config index 3 descriptor too short (expected 8192, got 18) [ 145.585196][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.588396][ T29] usb 5-1: config 0 has no interfaces? [ 145.591243][ T29] usb 5-1: config index 4 descriptor too short (expected 8192, got 18) [ 145.594542][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.598107][ T29] usb 5-1: config 0 has no interfaces? [ 145.601261][ T29] usb 5-1: config index 5 descriptor too short (expected 8192, got 18) [ 145.604310][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.607591][ T29] usb 5-1: config 0 has no interfaces? [ 145.611178][ T29] usb 5-1: config index 6 descriptor too short (expected 8192, got 18) [ 145.614701][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.618927][ T29] usb 5-1: config 0 has no interfaces? [ 145.622221][ T29] usb 5-1: config index 7 descriptor too short (expected 8192, got 18) [ 145.625408][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.630254][ T29] usb 5-1: config 0 has no interfaces? [ 145.635417][ T29] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 145.639274][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 145.642630][ T29] usb 5-1: Product: syz [ 145.644990][ T29] usb 5-1: Manufacturer: syz [ 145.646955][ T29] usb 5-1: SerialNumber: syz [ 145.650973][ T29] usb 5-1: config 0 descriptor?? [ 145.815980][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.819386][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.822129][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.825111][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.831171][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.833919][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.836211][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.838681][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.841105][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.844243][ T6025] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 145.850926][ T6025] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.869576][T11065] vhci_hcd: connection reset by peer [ 145.869911][ T29] usb 5-1: USB disconnect, device number 18 [ 145.873779][ T225] vhci_hcd vhci_hcd.0: stop threads [ 145.877383][ T225] vhci_hcd vhci_hcd.0: release socket [ 145.879889][ T225] vhci_hcd vhci_hcd.0: disconnect device [ 145.987508][ T40] audit: type=1400 audit(1768930992.590:659): avc: denied { read } for pid=11090 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.021596][T11093] FAULT_INJECTION: forcing a failure. [ 146.021596][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 146.027664][ T5999] usb 6-1: USB disconnect, device number 7 [ 146.031210][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.3.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.031231][T11093] Tainted: [L]=SOFTLOCKUP [ 146.031236][T11093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.031243][T11093] Call Trace: [ 146.031248][T11093] [ 146.031254][T11093] dump_stack_lvl+0x16c/0x1f0 [ 146.031277][T11093] should_fail_ex+0x512/0x640 [ 146.031288][T11093] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 146.031307][T11093] should_failslab+0xc2/0x120 [ 146.031324][T11093] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 146.031339][T11093] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 146.031352][T11093] ? kfree+0x2f8/0x6e0 [ 146.031365][T11093] ? kmemdup_nul+0x49/0xf0 [ 146.031377][T11093] kmemdup_nul+0x49/0xf0 [ 146.031390][T11093] vfs_parse_fs_qstr+0x112/0x1c0 [ 146.031403][T11093] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 146.031421][T11093] ? ovl_next_opt+0x143/0x1c0 [ 146.031437][T11093] ? __pfx_ovl_next_opt+0x10/0x10 [ 146.031449][T11093] vfs_parse_monolithic_sep+0x18d/0x210 [ 146.031464][T11093] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 146.031478][T11093] ? alloc_fs_context+0x677/0xf50 [ 146.031494][T11093] path_mount+0x76e/0x23a0 [ 146.031506][T11093] ? rcu_is_watching+0x12/0xc0 [ 146.031521][T11093] ? __pfx_path_mount+0x10/0x10 [ 146.031533][T11093] ? kmem_cache_free+0x2d8/0x770 [ 146.031547][T11093] ? putname+0xf5/0x1a0 [ 146.031568][T11093] ? putname+0xf5/0x1a0 [ 146.031584][T11093] ? putname+0xf5/0x1a0 [ 146.031604][T11093] ? __x64_sys_mount+0x293/0x310 [ 146.031615][T11093] __x64_sys_mount+0x293/0x310 [ 146.031627][T11093] ? __pfx___x64_sys_mount+0x10/0x10 [ 146.031645][T11093] do_syscall_64+0xcd/0xf80 [ 146.031664][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.031691][T11093] RIP: 0033:0x7f740c18f7c9 [ 146.031703][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.031715][T11093] RSP: 002b:00007f740d095038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.031728][T11093] RAX: ffffffffffffffda RBX: 00007f740c3e5fa0 RCX: 00007f740c18f7c9 [ 146.031737][T11093] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 146.031744][T11093] RBP: 00007f740d095090 R08: 00002000000004c0 R09: 0000000000000000 [ 146.031752][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.031759][T11093] R13: 00007f740c3e6038 R14: 00007f740c3e5fa0 R15: 00007ffc46adac08 [ 146.031777][T11093] [ 146.236515][T11104] netlink: 'syz.2.1516': attribute type 19 has an invalid length. [ 146.448372][T11121] FAULT_INJECTION: forcing a failure. [ 146.448372][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 146.453353][T11121] CPU: 2 UID: 0 PID: 11121 Comm: syz.0.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.453371][T11121] Tainted: [L]=SOFTLOCKUP [ 146.453374][T11121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.453380][T11121] Call Trace: [ 146.453385][T11121] [ 146.453389][T11121] dump_stack_lvl+0x16c/0x1f0 [ 146.453409][T11121] should_fail_ex+0x512/0x640 [ 146.453418][T11121] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 146.453434][T11121] should_failslab+0xc2/0x120 [ 146.453448][T11121] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 146.453461][T11121] ? kasan_quarantine_put+0x10a/0x240 [ 146.453472][T11121] ? ovl_do_parse_layer+0x33/0x1290 [ 146.453487][T11121] ? kstrdup+0x53/0x100 [ 146.453497][T11121] kstrdup+0x53/0x100 [ 146.453507][T11121] ovl_do_parse_layer+0x33/0x1290 [ 146.453520][T11121] ? ovl_mount_dir+0x15a/0x1f0 [ 146.453534][T11121] ovl_parse_param+0x10e3/0x15a0 [ 146.453547][T11121] ? selinux_fs_context_parse_param+0xd8/0x130 [ 146.453562][T11121] ? __pfx_ovl_parse_param+0x10/0x10 [ 146.453575][T11121] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 146.453589][T11121] ? static_key_count+0x5a/0x70 [ 146.453602][T11121] ? __pfx_ovl_parse_param+0x10/0x10 [ 146.453614][T11121] vfs_parse_fs_param+0x20b/0x3c0 [ 146.453626][T11121] vfs_parse_fs_qstr+0x138/0x1c0 [ 146.453637][T11121] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 146.453650][T11121] ? ovl_next_opt+0x143/0x1c0 [ 146.453662][T11121] ? __pfx_ovl_next_opt+0x10/0x10 [ 146.453673][T11121] vfs_parse_monolithic_sep+0x18d/0x210 [ 146.453685][T11121] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 146.453698][T11121] ? alloc_fs_context+0x677/0xf50 [ 146.453713][T11121] path_mount+0x76e/0x23a0 [ 146.453723][T11121] ? rcu_is_watching+0x12/0xc0 [ 146.453735][T11121] ? __pfx_path_mount+0x10/0x10 [ 146.453745][T11121] ? kmem_cache_free+0x2d8/0x770 [ 146.453755][T11121] ? putname+0xf5/0x1a0 [ 146.453773][T11121] ? putname+0xf5/0x1a0 [ 146.453786][T11121] ? putname+0xf5/0x1a0 [ 146.453809][T11121] ? __x64_sys_mount+0x293/0x310 [ 146.453818][T11121] __x64_sys_mount+0x293/0x310 [ 146.453828][T11121] ? __pfx___x64_sys_mount+0x10/0x10 [ 146.453842][T11121] do_syscall_64+0xcd/0xf80 [ 146.453858][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.453869][T11121] RIP: 0033:0x7f7fcd98f7c9 [ 146.453878][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.453887][T11121] RSP: 002b:00007f7fce858038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.453899][T11121] RAX: ffffffffffffffda RBX: 00007f7fcdbe5fa0 RCX: 00007f7fcd98f7c9 [ 146.453905][T11121] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 146.453910][T11121] RBP: 00007f7fce858090 R08: 00002000000004c0 R09: 0000000000000000 [ 146.453916][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.453922][T11121] R13: 00007f7fcdbe6038 R14: 00007f7fcdbe5fa0 R15: 00007ffdd4385c78 [ 146.453935][T11121] [ 146.485417][T11123] bridge0: port 2(syz_tun) entered blocking state [ 146.586257][T11123] bridge0: port 2(syz_tun) entered disabled state [ 146.589128][T11123] syz_tun: entered allmulticast mode [ 146.592694][T11123] syz_tun: entered promiscuous mode [ 146.622650][T11133] netlink: get zone limit has 4 unknown bytes [ 146.843210][ T850] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 146.995060][ T850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.999276][ T850] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.005388][ T850] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 147.009462][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.012966][ T850] usb 6-1: Product: syz [ 147.015498][ T850] usb 6-1: Manufacturer: syz [ 147.017544][ T850] usb 6-1: SerialNumber: syz [ 147.021576][ T850] usb 6-1: config 0 descriptor?? [ 147.279680][ T850] usb 6-1: USB disconnect, device number 8 [ 147.582617][T11169] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 147.601166][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.631182][T11169] bond0: (slave veth9): Enslaving as an active interface with a down link [ 147.638161][T11169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11169 comm=syz.3.1536 [ 147.645952][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 147.654928][T11169] vlan2: entered allmulticast mode [ 147.656902][T11169] veth1: entered allmulticast mode [ 147.757435][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 147.862481][T11199] tmpfs: Bad value for 'nr_blocks' [ 148.320618][T11227] tmpfs: Unknown parameter 'usrquota_inode_hafrdliqit' [ 148.325307][T11229] tmpfs: Unknown parameter 'usrquota_inode_hafrdliqit' [ 148.379108][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 148.379120][ T40] audit: type=1400 audit(1768930994.980:667): avc: denied { read } for pid=11234 comm="syz.3.1557" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.379178][T11237] random: crng reseeded on system resumption [ 148.406781][T11244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1558'. [ 148.427536][T11244] bond8: peer notification delay (2365) is not a multiple of miimon (1953002502), value rounded to 0 ms [ 148.514502][T11258] sp0: Synchronizing with TNC [ 148.633571][ T40] audit: type=1400 audit(1768930995.240:668): avc: denied { accept } for pid=11264 comm="syz.3.1565" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.745007][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 148.928658][T11290] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 148.991082][ T40] audit: type=1400 audit(1768930995.590:669): avc: denied { block_suspend } for pid=11289 comm="syz.3.1573" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.096722][T11301] XFS (nbd2): SB validate failed with error -5. [ 149.211747][T11308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=11308 comm=syz.3.1573 [ 149.348471][T11330] netlink: 'syz.0.1583': attribute type 1 has an invalid length. [ 149.363201][ T960] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 149.382949][T11330] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.387569][T11330] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 149.397800][T11340] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1586'. [ 149.437877][T11342] macvlan5: entered promiscuous mode [ 149.440151][T11342] macvlan5: entered allmulticast mode [ 149.443582][T11342] bond2: entered promiscuous mode [ 149.446703][T11342] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 149.453367][T11342] bond2: left promiscuous mode [ 149.523207][ T960] usb 7-1: Using ep0 maxpacket: 8 [ 149.526154][ T960] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 149.533175][ T960] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.536906][ T960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.540030][ T960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.548413][ T960] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.552511][ T960] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.555435][ T960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.579996][ T40] audit: type=1326 audit(1768930996.180:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.0.1589" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fcd98f7c9 code=0x0 [ 149.732223][ T40] audit: type=1400 audit(1768930996.330:671): avc: denied { accept } for pid=11355 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.762599][ T960] usb 7-1: GET_CAPABILITIES returned 0 [ 149.764852][ T960] usbtmc 7-1:16.0: can't read capabilities [ 149.794031][T11356] bond6: (slave bond_slave_1): Device is not our slave [ 149.796590][T11356] bond6: option active_slave: invalid value (bond_slave_1) [ 149.801970][T11356] bond6 (unregistering): Released all slaves [ 149.842128][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 149.846739][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 149.850808][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 149.854447][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 149.890302][ T40] audit: type=1400 audit(1768930996.490:672): avc: denied { wake_alarm } for pid=11363 comm="syz.3.1597" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.906985][T11365] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 149.912369][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1596'. [ 149.919982][T11362] ALSA: mixer_oss: invalid OSS volume '' [ 150.048158][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'. [ 150.081518][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 150.086632][T11380] binder: BINDER_SET_CONTEXT_MGR already set [ 150.089104][T11380] binder: 11378:11380 ioctl 4018620d 200000004a80 returned -16 [ 150.178730][ T4507] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.181499][ T4507] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.185099][ T4507] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.188140][ T4507] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.464714][ T40] audit: type=1400 audit(1768930997.070:673): avc: denied { search } for pid=11388 comm="syz.3.1606" name="/" dev="configfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.473759][ T40] audit: type=1400 audit(1768930997.070:674): avc: denied { setattr } for pid=11388 comm="syz.3.1606" name="/" dev="configfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.497227][ T40] audit: type=1400 audit(1768930997.100:675): avc: denied { call } for pid=11391 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.498875][T11392] binder: 11391:11392 ioctl c0306201 200000000280 returned -14 [ 150.523707][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 151.187263][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.190324][T11416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.237931][T11419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1614'. [ 151.283407][T11425] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 151.286382][T11425] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 151.290181][T11425] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 151.292737][T11425] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 151.370646][T11432] netlink: 'syz.3.1619': attribute type 2 has an invalid length. [ 151.389735][T11428] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.437957][T11440] FAULT_INJECTION: forcing a failure. [ 151.437957][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 151.442669][T11440] CPU: 3 UID: 0 PID: 11440 Comm: syz.3.1622 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.442687][T11440] Tainted: [L]=SOFTLOCKUP [ 151.442690][T11440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.442697][T11440] Call Trace: [ 151.442701][T11440] [ 151.442710][T11440] dump_stack_lvl+0x16c/0x1f0 [ 151.442729][T11440] should_fail_ex+0x512/0x640 [ 151.442739][T11440] ? __kmalloc_noprof+0xca/0x910 [ 151.442750][T11440] should_failslab+0xc2/0x120 [ 151.442764][T11440] __kmalloc_noprof+0xeb/0x910 [ 151.442773][T11440] ? __list_lru_init+0xe8/0x4c0 [ 151.442785][T11440] ? __list_lru_init+0xe8/0x4c0 [ 151.442794][T11440] __list_lru_init+0xe8/0x4c0 [ 151.442804][T11440] alloc_super+0x917/0xd00 [ 151.442820][T11440] sget_fc+0x116/0xc20 [ 151.442833][T11440] ? __pfx_set_anon_super_fc+0x10/0x10 [ 151.442845][T11440] ? __pfx_ovl_fill_super+0x10/0x10 [ 151.442857][T11440] get_tree_nodev+0x28/0x190 [ 151.442872][T11440] vfs_get_tree+0x8e/0x330 [ 151.442883][T11440] path_mount+0x7bf/0x23a0 [ 151.442893][T11440] ? rcu_is_watching+0x12/0xc0 [ 151.442905][T11440] ? __pfx_path_mount+0x10/0x10 [ 151.442915][T11440] ? kmem_cache_free+0x2d8/0x770 [ 151.442928][T11440] ? putname+0xf5/0x1a0 [ 151.442952][T11440] ? putname+0xf5/0x1a0 [ 151.442970][T11440] ? putname+0xf5/0x1a0 [ 151.442996][T11440] ? __x64_sys_mount+0x293/0x310 [ 151.443008][T11440] __x64_sys_mount+0x293/0x310 [ 151.443023][T11440] ? __pfx___x64_sys_mount+0x10/0x10 [ 151.443047][T11440] do_syscall_64+0xcd/0xf80 [ 151.443085][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.443102][T11440] RIP: 0033:0x7f740c18f7c9 [ 151.443118][T11440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.443132][T11440] RSP: 002b:00007f740d095038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.443148][T11440] RAX: ffffffffffffffda RBX: 00007f740c3e5fa0 RCX: 00007f740c18f7c9 [ 151.443157][T11440] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 151.443166][T11440] RBP: 00007f740d095090 R08: 00002000000004c0 R09: 0000000000000000 [ 151.443176][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.443185][T11440] R13: 00007f740c3e6038 R14: 00007f740c3e5fa0 R15: 00007ffc46adac08 [ 151.443209][T11440] [ 151.524689][ T40] audit: type=1400 audit(1768930998.090:676): avc: denied { ioctl } for pid=11442 comm="syz.1.1623" path="socket:[40502]" dev="sockfs" ino=40502 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.647299][T11463] 9pnet_virtio: no channels available for device syz [ 151.649785][T11463] 9pnet_virtio: no channels available for device syz [ 151.652068][T11463] 9pnet_virtio: no channels available for device syz [ 151.655651][T11463] 9pnet_virtio: no channels available for device syz [ 151.658422][T11463] 9pnet_virtio: no channels available for device syz [ 151.660749][T11463] 9pnet_virtio: no channels available for device syz [ 151.662322][T11461] mkiss: ax1: crc mode is auto. [ 151.664636][T11463] 9pnet_virtio: no channels available for device syz [ 151.664911][T11463] 9pnet_virtio: no channels available for device syz [ 151.669668][T11463] 9pnet_virtio: no channels available for device syz [ 151.672013][T11463] 9pnet_virtio: no channels available for device syz [ 151.674563][T11463] 9pnet_virtio: no channels available for device syz [ 151.886465][T11473] FAULT_INJECTION: forcing a failure. [ 151.886465][T11473] name failslab, interval 1, probability 0, space 0, times 0 [ 151.891798][T11473] CPU: 2 UID: 0 PID: 11473 Comm: syz.1.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.891826][T11473] Tainted: [L]=SOFTLOCKUP [ 151.891831][T11473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.891842][T11473] Call Trace: [ 151.891851][T11473] [ 151.891859][T11473] dump_stack_lvl+0x16c/0x1f0 [ 151.891889][T11473] should_fail_ex+0x512/0x640 [ 151.891905][T11473] ? __kmalloc_noprof+0xca/0x910 [ 151.891924][T11473] should_failslab+0xc2/0x120 [ 151.891946][T11473] __kmalloc_noprof+0xeb/0x910 [ 151.891967][T11473] ? capable+0xd4/0x110 [ 151.891988][T11473] ? ovl_fill_super+0x35d/0x6b30 [ 151.892013][T11473] ? ovl_fill_super+0x35d/0x6b30 [ 151.892031][T11473] ovl_fill_super+0x35d/0x6b30 [ 151.892050][T11473] ? __mutex_unlock_slowpath+0x161/0x790 [ 151.892071][T11473] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.892091][T11473] ? lockdep_init_map_type+0x5c/0x270 [ 151.892109][T11473] ? __pfx_ovl_fill_super+0x10/0x10 [ 151.892122][T11473] ? __init_swait_queue_head+0xca/0x150 [ 151.892141][T11473] ? shrinker_register+0x1a8/0x260 [ 151.892156][T11473] ? sget_fc+0x808/0xc20 [ 151.892171][T11473] ? __pfx_set_anon_super_fc+0x10/0x10 [ 151.892186][T11473] ? __pfx_ovl_fill_super+0x10/0x10 [ 151.892199][T11473] get_tree_nodev+0xdd/0x190 [ 151.892216][T11473] vfs_get_tree+0x8e/0x330 [ 151.892229][T11473] path_mount+0x7bf/0x23a0 [ 151.892241][T11473] ? rcu_is_watching+0x12/0xc0 [ 151.892255][T11473] ? __pfx_path_mount+0x10/0x10 [ 151.892267][T11473] ? kmem_cache_free+0x2d8/0x770 [ 151.892280][T11473] ? putname+0xf5/0x1a0 [ 151.892300][T11473] ? putname+0xf5/0x1a0 [ 151.892319][T11473] ? putname+0xf5/0x1a0 [ 151.892345][T11473] ? __x64_sys_mount+0x293/0x310 [ 151.892359][T11473] __x64_sys_mount+0x293/0x310 [ 151.892377][T11473] ? __pfx___x64_sys_mount+0x10/0x10 [ 151.892400][T11473] do_syscall_64+0xcd/0xf80 [ 151.892425][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.892442][T11473] RIP: 0033:0x7f26c9f8f7c9 [ 151.892457][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.892472][T11473] RSP: 002b:00007f26cadb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.892489][T11473] RAX: ffffffffffffffda RBX: 00007f26ca1e5fa0 RCX: 00007f26c9f8f7c9 [ 151.892499][T11473] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 151.892510][T11473] RBP: 00007f26cadb6090 R08: 00002000000004c0 R09: 0000000000000000 [ 151.892520][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.892529][T11473] R13: 00007f26ca1e6038 R14: 00007f26ca1e5fa0 R15: 00007ffec428e498 [ 151.892553][T11473] [ 152.050126][ T10] usb 7-1: USB disconnect, device number 33 [ 152.069708][T11479] netlink: 'syz.0.1635': attribute type 33 has an invalid length. [ 152.073721][T11478] dvmrp6: entered allmulticast mode [ 152.280919][T11504] FAULT_INJECTION: forcing a failure. [ 152.280919][T11504] name failslab, interval 1, probability 0, space 0, times 0 [ 152.286160][T11504] CPU: 1 UID: 0 PID: 11504 Comm: syz.0.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.286184][T11504] Tainted: [L]=SOFTLOCKUP [ 152.286189][T11504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.286198][T11504] Call Trace: [ 152.286203][T11504] [ 152.286210][T11504] dump_stack_lvl+0x16c/0x1f0 [ 152.286235][T11504] should_fail_ex+0x512/0x640 [ 152.286249][T11504] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 152.286266][T11504] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.286282][T11504] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.286297][T11504] should_failslab+0xc2/0x120 [ 152.286316][T11504] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 152.286330][T11504] ? ilookup5+0x19f/0x230 [ 152.286346][T11504] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.286360][T11504] ? ovl_alloc_inode+0x25/0x190 [ 152.286378][T11504] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.286393][T11504] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.286407][T11504] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 152.286421][T11504] ? ovl_alloc_inode+0x25/0x190 [ 152.286435][T11504] ovl_alloc_inode+0x25/0x190 [ 152.286449][T11504] alloc_inode+0x64/0x240 [ 152.286465][T11504] iget5_locked+0x67/0xb0 [ 152.286480][T11504] ? ovl_fill_super+0x3e1/0x6b30 [ 152.286498][T11504] ovl_get_trap_inode+0xb2/0x210 [ 152.286517][T11504] ovl_fill_super+0x8f5/0x6b30 [ 152.286546][T11504] ? lockdep_init_map_type+0x5c/0x270 [ 152.286567][T11504] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.286582][T11504] ? __init_swait_queue_head+0xca/0x150 [ 152.286605][T11504] ? shrinker_register+0x1a8/0x260 [ 152.286622][T11504] ? sget_fc+0x808/0xc20 [ 152.286641][T11504] ? __pfx_set_anon_super_fc+0x10/0x10 [ 152.286658][T11504] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.286674][T11504] get_tree_nodev+0xdd/0x190 [ 152.286693][T11504] vfs_get_tree+0x8e/0x330 [ 152.286710][T11504] path_mount+0x7bf/0x23a0 [ 152.286724][T11504] ? rcu_is_watching+0x12/0xc0 [ 152.286741][T11504] ? __pfx_path_mount+0x10/0x10 [ 152.286755][T11504] ? kmem_cache_free+0x2d8/0x770 [ 152.286771][T11504] ? putname+0xf5/0x1a0 [ 152.286795][T11504] ? putname+0xf5/0x1a0 [ 152.286814][T11504] ? putname+0xf5/0x1a0 [ 152.286837][T11504] ? __x64_sys_mount+0x293/0x310 [ 152.286850][T11504] __x64_sys_mount+0x293/0x310 [ 152.286865][T11504] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.286887][T11504] do_syscall_64+0xcd/0xf80 [ 152.286910][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.286925][T11504] RIP: 0033:0x7f7fcd98f7c9 [ 152.286938][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.286957][T11504] RSP: 002b:00007f7fce858038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.286973][T11504] RAX: ffffffffffffffda RBX: 00007f7fcdbe5fa0 RCX: 00007f7fcd98f7c9 [ 152.286982][T11504] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 152.286990][T11504] RBP: 00007f7fce858090 R08: 00002000000004c0 R09: 0000000000000000 [ 152.286999][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.287008][T11504] R13: 00007f7fcdbe6038 R14: 00007f7fcdbe5fa0 R15: 00007ffdd4385c78 [ 152.287032][T11504] [ 152.487614][T11523] xt_l2tp: wrong L2TP version: 0 [ 152.496453][T11519] affs: No valid root block on device nullb0 [ 152.568830][T11537] FAULT_INJECTION: forcing a failure. [ 152.568830][T11537] name failslab, interval 1, probability 0, space 0, times 0 [ 152.575677][T11537] CPU: 3 UID: 0 PID: 11537 Comm: syz.0.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.575705][T11537] Tainted: [L]=SOFTLOCKUP [ 152.575711][T11537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.575721][T11537] Call Trace: [ 152.575727][T11537] [ 152.575733][T11537] dump_stack_lvl+0x16c/0x1f0 [ 152.575760][T11537] should_fail_ex+0x512/0x640 [ 152.575775][T11537] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 152.575794][T11537] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.575812][T11537] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.575828][T11537] should_failslab+0xc2/0x120 [ 152.575851][T11537] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 152.575866][T11537] ? ilookup5+0x19f/0x230 [ 152.575883][T11537] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.575900][T11537] ? ovl_alloc_inode+0x25/0x190 [ 152.575920][T11537] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.575937][T11537] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.575953][T11537] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 152.575970][T11537] ? ovl_alloc_inode+0x25/0x190 [ 152.575987][T11537] ovl_alloc_inode+0x25/0x190 [ 152.576012][T11537] alloc_inode+0x64/0x240 [ 152.576031][T11537] iget5_locked+0x67/0xb0 [ 152.576048][T11537] ? ovl_fill_super+0x3e1/0x6b30 [ 152.576071][T11537] ovl_get_trap_inode+0xb2/0x210 [ 152.576093][T11537] ovl_fill_super+0x8f5/0x6b30 [ 152.576129][T11537] ? lockdep_init_map_type+0x5c/0x270 [ 152.576154][T11537] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.576174][T11537] ? __init_swait_queue_head+0xca/0x150 [ 152.576200][T11537] ? shrinker_register+0x1a8/0x260 [ 152.576221][T11537] ? sget_fc+0x808/0xc20 [ 152.576243][T11537] ? __pfx_set_anon_super_fc+0x10/0x10 [ 152.576263][T11537] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.576281][T11537] get_tree_nodev+0xdd/0x190 [ 152.576305][T11537] vfs_get_tree+0x8e/0x330 [ 152.576324][T11537] path_mount+0x7bf/0x23a0 [ 152.576341][T11537] ? rcu_is_watching+0x12/0xc0 [ 152.576361][T11537] ? __pfx_path_mount+0x10/0x10 [ 152.576376][T11537] ? kmem_cache_free+0x2d8/0x770 [ 152.576393][T11537] ? putname+0xf5/0x1a0 [ 152.576422][T11537] ? putname+0xf5/0x1a0 [ 152.576445][T11537] ? putname+0xf5/0x1a0 [ 152.576473][T11537] ? __x64_sys_mount+0x293/0x310 [ 152.576488][T11537] __x64_sys_mount+0x293/0x310 [ 152.576506][T11537] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.576531][T11537] do_syscall_64+0xcd/0xf80 [ 152.576557][T11537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.576575][T11537] RIP: 0033:0x7f7fcd98f7c9 [ 152.576590][T11537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.576605][T11537] RSP: 002b:00007f7fce858038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.576621][T11537] RAX: ffffffffffffffda RBX: 00007f7fcdbe5fa0 RCX: 00007f7fcd98f7c9 [ 152.576632][T11537] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 152.576642][T11537] RBP: 00007f7fce858090 R08: 00002000000004c0 R09: 0000000000000000 [ 152.576652][T11537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.576662][T11537] R13: 00007f7fcdbe6038 R14: 00007f7fcdbe5fa0 R15: 00007ffdd4385c78 [ 152.576688][T11537] [ 152.607099][T11541] vcan0 speed is unknown, defaulting to 1000 [ 152.717978][T11541] vcan0 speed is unknown, defaulting to 1000 [ 152.720335][T11541] vcan0 speed is unknown, defaulting to 1000 [ 152.804572][T11541] infiniband syz2: set active [ 152.806251][ T5966] vcan0 speed is unknown, defaulting to 1000 [ 152.809022][T11541] infiniband syz2: added vcan0 [ 152.838824][T11541] RDS/IB: syz2: added [ 152.840318][T11541] smc: adding ib device syz2 with port count 1 [ 152.842823][T11541] smc: ib device syz2 port 1 has no pnetid [ 152.843596][T11550] XFS (nbd0): no-recovery mounts must be read-only. [ 152.845718][ T1462] vcan0 speed is unknown, defaulting to 1000 [ 152.851487][T11541] vcan0 speed is unknown, defaulting to 1000 [ 152.960977][T11560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11560 comm=syz.1.1662 [ 152.990188][T11562] FAULT_INJECTION: forcing a failure. [ 152.990188][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 152.995735][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.0.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.995760][T11562] Tainted: [L]=SOFTLOCKUP [ 152.995764][T11562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.995773][T11562] Call Trace: [ 152.995778][T11562] [ 152.995784][T11562] dump_stack_lvl+0x16c/0x1f0 [ 152.995810][T11562] should_fail_ex+0x512/0x640 [ 152.995823][T11562] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 152.995840][T11562] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.995856][T11562] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.995871][T11562] should_failslab+0xc2/0x120 [ 152.995890][T11562] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 152.995904][T11562] ? ilookup5+0x19f/0x230 [ 152.995919][T11562] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.995934][T11562] ? ovl_alloc_inode+0x25/0x190 [ 152.995951][T11562] ? __pfx_ovl_inode_test+0x10/0x10 [ 152.995965][T11562] ? __pfx_ovl_inode_set+0x10/0x10 [ 152.995979][T11562] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 152.995994][T11562] ? ovl_alloc_inode+0x25/0x190 [ 152.996007][T11562] ovl_alloc_inode+0x25/0x190 [ 152.996021][T11562] alloc_inode+0x64/0x240 [ 152.996037][T11562] iget5_locked+0x67/0xb0 [ 152.996051][T11562] ? ovl_fill_super+0x3e1/0x6b30 [ 152.996070][T11562] ovl_get_trap_inode+0xb2/0x210 [ 152.996088][T11562] ovl_fill_super+0x8f5/0x6b30 [ 152.996117][T11562] ? lockdep_init_map_type+0x5c/0x270 [ 152.996137][T11562] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.996152][T11562] ? __init_swait_queue_head+0xca/0x150 [ 152.996176][T11562] ? shrinker_register+0x1a8/0x260 [ 152.996193][T11562] ? sget_fc+0x808/0xc20 [ 152.996211][T11562] ? __pfx_set_anon_super_fc+0x10/0x10 [ 152.996228][T11562] ? __pfx_ovl_fill_super+0x10/0x10 [ 152.996243][T11562] get_tree_nodev+0xdd/0x190 [ 152.996261][T11562] vfs_get_tree+0x8e/0x330 [ 152.996277][T11562] path_mount+0x7bf/0x23a0 [ 152.996291][T11562] ? rcu_is_watching+0x12/0xc0 [ 152.996307][T11562] ? __pfx_path_mount+0x10/0x10 [ 152.996322][T11562] ? kmem_cache_free+0x2d8/0x770 [ 152.996337][T11562] ? putname+0xf5/0x1a0 [ 152.996361][T11562] ? putname+0xf5/0x1a0 [ 152.996379][T11562] ? putname+0xf5/0x1a0 [ 152.996393][T11541] vcan0 speed is unknown, defaulting to 1000 [ 152.996402][T11562] ? __x64_sys_mount+0x293/0x310 [ 152.996415][T11562] __x64_sys_mount+0x293/0x310 [ 152.996429][T11562] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.996450][T11562] do_syscall_64+0xcd/0xf80 [ 152.996472][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.996486][T11562] RIP: 0033:0x7f7fcd98f7c9 [ 152.996498][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.996512][T11562] RSP: 002b:00007f7fce858038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.996527][T11562] RAX: ffffffffffffffda RBX: 00007f7fcdbe5fa0 RCX: 00007f7fcd98f7c9 [ 152.996537][T11562] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 152.996545][T11562] RBP: 00007f7fce858090 R08: 00002000000004c0 R09: 0000000000000000 [ 152.996554][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.996562][T11562] R13: 00007f7fcdbe6038 R14: 00007f7fcdbe5fa0 R15: 00007ffdd4385c78 [ 152.996583][T11562] [ 153.022102][T11564] netem: incorrect ge model size [ 153.133405][T11564] netem: change failed [ 153.151718][T11568] loop2: detected capacity change from 0 to 7 [ 153.154444][T11541] vcan0 speed is unknown, defaulting to 1000 [ 153.161996][T11568] loop2: [ 153.163527][T11568] loop2: partition table partially beyond EOD, truncated [ 153.259810][T11541] vcan0 speed is unknown, defaulting to 1000 [ 153.295279][T11585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.321144][T11582] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 153.324454][T11582] ALSA: mixer_oss: invalid index 1374389 [ 153.451961][T11592] netlink: 'syz.0.1672': attribute type 8 has an invalid length. [ 153.767215][T11614] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 153.769369][T11614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.772089][T11614] vhci_hcd vhci_hcd.0: Device attached [ 153.830305][T11617] 9p: Bad value for 'rfdno' [ 153.851594][T11615] vhci_hcd: connection closed [ 153.853364][ T61] vhci_hcd vhci_hcd.0: stop threads [ 153.858114][ T61] vhci_hcd vhci_hcd.0: release socket [ 153.860652][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 154.460411][T11632] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.464862][T11632] block device autoloading is deprecated and will be removed. [ 154.556856][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 154.556871][ T40] audit: type=1400 audit(1768931001.160:680): avc: denied { relabelfrom } for pid=11659 comm="syz.0.1687" name="NETLINK" dev="sockfs" ino=40852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.557239][T11660] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 154.571769][ T40] audit: type=1400 audit(1768931001.170:681): avc: denied { relabelto } for pid=11659 comm="syz.0.1687" name="NETLINK" dev="sockfs" ino=40852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 154.573620][T11660] Failed to get privilege flags for destination (handle=0x2:0x7) [ 154.838532][ T40] audit: type=1400 audit(1768931001.440:682): avc: denied { shutdown } for pid=11686 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.935121][T11691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=11691 comm=syz.0.1695 [ 154.956597][T11692] __nla_validate_parse: 8 callbacks suppressed [ 154.956613][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 154.973708][T11702] FAULT_INJECTION: forcing a failure. [ 154.973708][T11702] name failslab, interval 1, probability 0, space 0, times 0 [ 154.985870][T11702] CPU: 0 UID: 0 PID: 11702 Comm: syz.2.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.985899][T11702] Tainted: [L]=SOFTLOCKUP [ 154.985906][T11702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.985916][T11702] Call Trace: [ 154.985923][T11702] [ 154.985930][T11702] dump_stack_lvl+0x16c/0x1f0 [ 154.985988][T11702] should_fail_ex+0x512/0x640 [ 154.986014][T11702] ? fs_reclaim_acquire+0xae/0x150 [ 154.986040][T11702] should_failslab+0xc2/0x120 [ 154.986064][T11702] kmem_cache_alloc_noprof+0x83/0x770 [ 154.986081][T11702] ? __pfx_map_id_range_down+0x10/0x10 [ 154.986100][T11702] ? security_inode_alloc+0x3b/0x2b0 [ 154.986125][T11702] ? security_inode_alloc+0x3b/0x2b0 [ 154.986144][T11702] security_inode_alloc+0x3b/0x2b0 [ 154.986166][T11702] inode_init_always_gfp+0xced/0x1040 [ 154.986194][T11702] ? __pfx_ovl_inode_test+0x10/0x10 [ 154.986214][T11702] ? __pfx_ovl_inode_set+0x10/0x10 [ 154.986231][T11702] alloc_inode+0x86/0x240 [ 154.986250][T11702] iget5_locked+0x67/0xb0 [ 154.986267][T11702] ? ovl_fill_super+0x3e1/0x6b30 [ 154.986288][T11702] ovl_get_trap_inode+0xb2/0x210 [ 154.986310][T11702] ovl_fill_super+0x8f5/0x6b30 [ 154.986344][T11702] ? lockdep_init_map_type+0x5c/0x270 [ 154.986368][T11702] ? __pfx_ovl_fill_super+0x10/0x10 [ 154.986387][T11702] ? __init_swait_queue_head+0xca/0x150 [ 154.986414][T11702] ? shrinker_register+0x1a8/0x260 [ 154.986434][T11702] ? sget_fc+0x808/0xc20 [ 154.986454][T11702] ? __pfx_set_anon_super_fc+0x10/0x10 [ 154.986475][T11702] ? __pfx_ovl_fill_super+0x10/0x10 [ 154.986493][T11702] get_tree_nodev+0xdd/0x190 [ 154.986516][T11702] vfs_get_tree+0x8e/0x330 [ 154.986534][T11702] path_mount+0x7bf/0x23a0 [ 154.986551][T11702] ? rcu_is_watching+0x12/0xc0 [ 154.986571][T11702] ? __pfx_path_mount+0x10/0x10 [ 154.986590][T11702] ? kmem_cache_free+0x2d8/0x770 [ 154.986609][T11702] ? putname+0xf5/0x1a0 [ 154.986636][T11702] ? putname+0xf5/0x1a0 [ 154.986657][T11702] ? putname+0xf5/0x1a0 [ 154.986684][T11702] ? __x64_sys_mount+0x293/0x310 [ 154.986700][T11702] __x64_sys_mount+0x293/0x310 [ 154.986716][T11702] ? __pfx___x64_sys_mount+0x10/0x10 [ 154.986749][T11702] do_syscall_64+0xcd/0xf80 [ 154.986775][T11702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.986793][T11702] RIP: 0033:0x7f989358f7c9 [ 154.986806][T11702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.986823][T11702] RSP: 002b:00007f98944f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.986839][T11702] RAX: ffffffffffffffda RBX: 00007f98937e5fa0 RCX: 00007f989358f7c9 [ 154.986851][T11702] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 154.986861][T11702] RBP: 00007f98944f0090 R08: 00002000000004c0 R09: 0000000000000000 [ 154.986870][T11702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.986880][T11702] R13: 00007f98937e6038 R14: 00007f98937e5fa0 R15: 00007ffd47d29e58 [ 154.986904][T11702] [ 154.998698][T11708] openvswitch: netlink: IP tunnel dst address not specified [ 155.007464][T11704] netlink: 'syz.3.1698': attribute type 4 has an invalid length. [ 155.024805][T11710] openvswitch: netlink: IP tunnel dst address not specified [ 155.035249][T11704] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1698'. [ 155.128113][T11726] netlink: 'syz.2.1705': attribute type 9 has an invalid length. [ 155.157639][T11734] random: crng reseeded on system resumption [ 155.225379][T11746] syz.1.1711 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.299252][ T40] audit: type=1400 audit(1768931001.900:683): avc: denied { write } for pid=11762 comm="syz.0.1715" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.300339][T11759] 9p: Could not find request transport: vrtio [ 155.308017][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 155.534560][T11791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11791 comm=syz.2.1721 [ 155.538997][T11791] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 155.542243][T11791] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 155.550960][T11786] netlink: 'syz.1.1720': attribute type 11 has an invalid length. [ 155.587108][ T6156] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 155.618593][T11803] nbd: must specify a size in bytes for the device [ 155.733286][ T6156] usb 5-1: Using ep0 maxpacket: 32 [ 155.737322][ T6156] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.740839][ T6156] usb 5-1: config 0 has no interface number 0 [ 155.744902][ T6156] usb 5-1: config 0 interface 12 has no altsetting 0 [ 155.749987][ T6156] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.755425][ T6156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.758821][ T6156] usb 5-1: Product: syz [ 155.760601][ T6156] usb 5-1: Manufacturer: syz [ 155.762596][ T6156] usb 5-1: SerialNumber: syz [ 155.769410][ T6156] usb 5-1: config 0 descriptor?? [ 155.774159][ T6156] f81534 5-1:0.12: required endpoints missing [ 155.823786][T11809] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 155.974648][ T5966] usb 5-1: USB disconnect, device number 19 [ 156.080501][T11830] SET target dimension over the limit! [ 156.084088][T11830] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1731'. [ 156.286274][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.289760][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.292590][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.296014][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.299579][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.303925][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 156.410800][T11847] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 156.417107][T11847] netlink: 'syz.2.1738': attribute type 2 has an invalid length. [ 156.420421][T11847] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 156.423769][T11847] netlink: 'syz.2.1738': attribute type 3 has an invalid length. [ 156.427947][T11847] MTD: Couldn't look up '/dev/sg0': -15 [ 156.430399][T11847] /dev/sg0: Can't lookup blockdev [ 156.455178][ T40] audit: type=1400 audit(1768931003.060:684): avc: denied { lock } for pid=11854 comm="syz.1.1735" path="/402/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.586649][ T40] audit: type=1400 audit(1768931003.190:685): avc: denied { mounton } for pid=11870 comm="syz.1.1744" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 156.586707][T11872] gfs2: Unknown parameter 'barrierƾ j-ox}jj!9Lp}aRhE:j<5AJ.ͬB [ 156.586707][T11872] J?d6oGSԣk>)lȃnp$";d ܥ#'p} V&<M15<;y .9' [ 156.607397][T11872] gfs2: Unknown parameter 'barrierƾ j-ox}jj!9Lp}aRhE:j<5AJ.ͬB [ 156.607397][T11872] J?d6oGSԣk>)lȃnp$";d ܥ#'p} V&<M15<;y .9' [ 156.620185][T11872] gfs2: Unknown parameter 'barrierƾ j-ox}jj!9Lp}aRhE:j<5AJ.ͬB [ 156.620185][T11872] J?d6oGSԣk>)lȃnp$";d ܥ#'p} V&<M15<;y .9' [ 156.631688][T11872] gfs2: Unknown parameter 'barrierƾ j-ox}jj!9Lp}aRhE:j<5AJ.ͬB [ 156.631688][T11872] J?d6oGSԣk>)lȃnp$";d ܥ#'p} V&<M15<;y .9' [ 156.770455][ T40] audit: type=1400 audit(1768931003.370:686): avc: denied { write } for pid=11894 comm="syz.2.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.876358][T11895] netlink: 'syz.2.1748': attribute type 11 has an invalid length. [ 156.973626][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.065692][T11919] fuse: Bad value for 'fd' [ 157.133528][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 157.137822][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 157.141440][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.40 [ 157.144652][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.147308][ T10] usb 6-1: Product: syz [ 157.148706][ T10] usb 6-1: Manufacturer: ᰉ [ 157.150181][ T10] usb 6-1: SerialNumber: syz [ 157.260892][T11932] vcan0 speed is unknown, defaulting to 1000 [ 157.277795][T11931] vcan0: entered allmulticast mode [ 157.332428][T11952] overlayfs: invalid origin (0000) [ 157.409591][T11968] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 157.412895][T11968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 157.496351][ T40] audit: type=1400 audit(1768931004.100:687): avc: denied { ioctl } for pid=11983 comm="syz.3.1766" path="socket:[47220]" dev="sockfs" ino=47220 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.575329][T11989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=11989 comm=syz.3.1768 [ 157.604327][T11989] bond4: option lacp_rate: invalid value (52) [ 157.608254][T11989] bond4 (unregistering): Released all slaves [ 157.625664][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 157.627660][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 157.631807][ T10] usb 6-1: USB disconnect, device number 9 [ 157.889250][T12140] : renamed from bond0 [ 157.906129][T12137] 9p: p9: multiple sources not supported [ 157.987262][T12148] netlink: 'syz.2.1776': attribute type 9 has an invalid length. [ 157.990742][T12148] netlink: 'syz.2.1776': attribute type 11 has an invalid length. [ 158.001180][T12148] netlink: 'syz.2.1776': attribute type 12 has an invalid length. [ 158.052544][T12157] Cannot find del_set index 4 as target [ 158.083755][T12159] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.088293][T12159] overlayfs: failed to set xattr on upper [ 158.090668][T12159] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.095853][T12159] overlayfs: ...falling back to index=off. [ 158.098281][T12159] overlayfs: ...falling back to uuid=null. [ 158.100207][T12159] overlayfs: ...falling back to xino=off. [ 158.102522][T12159] overlayfs: conflicting lowerdir path [ 158.482137][ T5966] kernel read not supported for file bpf-prog (pid: 5966 comm: kworker/2:3) [ 158.657192][T12212] netlink: 'syz.0.1795': attribute type 39 has an invalid length. [ 158.657204][T12211] netlink: 'syz.0.1795': attribute type 39 has an invalid length. [ 159.105981][T12182] orangefs_mount: mount request failed with -4 [ 159.675188][T12287] 9pnet_virtio: no channels available for device syz [ 159.682410][T12287] overlayfs: failed to clone upperpath [ 159.762438][T12296] overlayfs: failed to clone upperpath [ 159.989132][ T40] audit: type=1800 audit(1768931006.590:688): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1822" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 160.201289][ T40] audit: type=1804 audit(1768931006.800:689): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1830" name="file0" dev="tmpfs" ino=2730 res=1 errno=0 [ 160.210776][ T40] audit: type=1800 audit(1768931006.810:690): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1830" name="file0" dev="tmpfs" ino=2730 res=0 errno=0 [ 160.347744][ T40] audit: type=1400 audit(1768931006.950:691): avc: denied { accept } for pid=12358 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 160.356847][T12360] __nla_validate_parse: 70 callbacks suppressed [ 160.356860][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 160.504990][T12381] overlayfs: failed to resolve './bus': -2 [ 160.770306][T12404] usb usb8: usbfs: process 12404 (syz.1.1843) did not claim interface 0 before use [ 160.860117][T12411] can: request_module (can-proto-0) failed. [ 160.864668][T12411] fuseblk: Bad value for 'rootmode' [ 161.045663][T12434] input: syz1 as /devices/virtual/input/input20 [ 161.318815][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1855'. [ 161.321931][T12473] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 161.324803][T12473] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 161.328311][T12473] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.413219][ C2] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 161.495162][T12487] validate_nla: 3 callbacks suppressed [ 161.495177][T12487] netlink: 'syz.0.1857': attribute type 39 has an invalid length. [ 161.626546][T12514] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 161.734092][T12518] /dev/sr0: Can't open blockdev [ 161.791999][T12518] trusted_key: encrypted_key: insufficient parameters specified [ 162.053197][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.144418][T12544] overlayfs: failed to resolve './bus': -2 [ 162.152608][T12547] overlayfs: failed to resolve './bus': -2 [ 162.185018][ T8100] syzkaller0: tun_net_xmit 76 [ 162.187691][ T8100] syzkaller0: tun_net_xmit 48 [ 162.213724][ T1462] syzkaller0: tun_net_xmit 76 [ 162.323361][ T1462] syzkaller0: tun_net_xmit 76 [ 162.709900][T12595] netlink: 'syz.0.1880': attribute type 5 has an invalid length. [ 162.852771][ T5999] hid_parser_main: 5 callbacks suppressed [ 162.852786][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.860487][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.862944][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.866952][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.869361][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.871693][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.874593][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.876996][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.879364][ T5999] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 162.929328][ T5999] hid-generic 0003:0004:0000.0006: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 163.582430][T12629] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1884'. [ 163.595148][T12623] bond3: entered promiscuous mode [ 163.622066][T12622] syzkaller1: entered promiscuous mode [ 163.623954][T12622] syzkaller1: entered allmulticast mode [ 163.959077][T12703] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.962219][T12703] overlayfs: failed to set xattr on upper [ 163.964904][T12703] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.967787][T12703] overlayfs: ...falling back to index=off. [ 163.970319][T12703] overlayfs: ...falling back to uuid=null. [ 163.985311][T12703] overlay: filesystem on ./bus not supported as upperdir [ 163.991540][T12703] netlink: 'syz.0.1894': attribute type 12 has an invalid length. [ 163.994269][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 163.997505][T12703] netlink: 'syz.0.1894': attribute type 12 has an invalid length. [ 163.999947][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 164.065544][T12711] 9p: Bad value for 'rfdno' [ 164.102290][T12716] binder: BINDER_SET_CONTEXT_MGR already set [ 164.105089][T12716] binder: 12707:12716 ioctl 40046207 0 returned -16 [ 164.122507][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 164.136104][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 164.171722][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 164.174860][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 164.184220][T11641] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.184250][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 164.187457][T11641] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.192558][T11641] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.198497][T11641] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.273408][T12728] binder: BINDER_SET_CONTEXT_MGR already set [ 164.275579][T12728] binder: 12726:12728 ioctl 4018620d 200000000100 returned -16 [ 164.295129][T12728] binder: BINDER_SET_CONTEXT_MGR already set [ 164.297725][T12728] binder: 12726:12728 ioctl 4018620d 200000004a80 returned -16 [ 164.307268][T12742] IPVS: set_ctl: invalid protocol: 115 172.20.20.23:20004 [ 164.422869][T12751] sctp: [Deprecated]: syz.3.1910 (pid 12751) Use of int in max_burst socket option deprecated. [ 164.422869][T12751] Use struct sctp_assoc_value instead [ 164.431388][T12751] netlink: 'syz.3.1910': attribute type 3 has an invalid length. [ 164.968523][ T40] audit: type=1400 audit(1768931011.570:692): avc: denied { getopt } for pid=12758 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.018659][ T40] audit: type=1326 audit(1768931011.620:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.1916" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f740c18f7c9 code=0x0 [ 165.339629][T12772] binder: BINDER_SET_CONTEXT_MGR already set [ 165.341730][T12772] binder: 12771:12772 ioctl 4018620d 200000000040 returned -16 [ 166.213373][ T40] audit: type=1400 audit(1768931012.820:694): avc: denied { bind } for pid=12789 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.447963][T12819] bad cache= option: nonw [ 166.447963][T12819] [ 166.450279][T12819] CIFS: VFS: bad cache= option: nonw [ 166.452012][T12819] CIFS mount error: No usable UNC path provided in device string! [ 166.452012][T12819] [ 166.455564][T12819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 166.649064][ T40] audit: type=1400 audit(1768931013.250:695): avc: denied { listen } for pid=12844 comm="syz.1.1939" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.679412][T12852] program syz.1.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.688825][T12852] ptrace attach of "/syz-executor exec"[5941] was attempted by " 0xffffffffffffffff"[12852] [ 166.976017][ T40] audit: type=1400 audit(1768931013.580:696): avc: denied { ioctl } for pid=12875 comm="syz.1.1948" path="socket:[45925]" dev="sockfs" ino=45925 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.059079][T12889] netlink: 'syz.1.1951': attribute type 11 has an invalid length. [ 167.062769][ T40] audit: type=1400 audit(1768931013.660:697): avc: denied { map } for pid=12888 comm="syz.1.1951" path="socket:[46757]" dev="sockfs" ino=46757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 167.133692][T12900] tmpfs: Unknown parameter 'grpquotavents' [ 167.136639][ T40] audit: type=1326 audit(1768931013.740:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c9f8f7c9 code=0x7fc00000 [ 167.153235][ T40] audit: type=1326 audit(1768931013.740:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c9f8f7c9 code=0x7fc00000 [ 167.167926][ T40] audit: type=1326 audit(1768931013.740:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c9f8f7c9 code=0x7fc00000 [ 167.169903][T12901] __nla_validate_parse: 3 callbacks suppressed [ 167.169913][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 167.177562][ T40] audit: type=1326 audit(1768931013.740:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c9f8f7c9 code=0x7fc00000 [ 167.177612][ T40] audit: type=1326 audit(1768931013.740:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c9f8f7c9 code=0x7fc00000 [ 167.197934][T12901] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.322312][T12913] macsec2: entered promiscuous mode [ 167.324348][T12913] macsec2: entered allmulticast mode [ 167.499334][T12937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1963'. [ 167.502201][T12939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1964'. [ 167.508263][T12939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=12939 comm=syz.3.1964 [ 167.551305][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'. [ 167.555416][T12946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1966'. [ 167.618674][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 167.650278][T12960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 167.658208][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 167.661218][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 167.733245][T12965] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 167.846279][T12971] md: md2 stopped. [ 167.873623][T12971] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 167.875532][T12971] PKCS7: Only support pkcs7_signedData type [ 167.987963][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 168.091811][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 168.100331][T13007] overlayfs: failed to clone upperpath [ 168.130734][ T6156] libceph: connect (1)[c::]:6789 error -101 [ 168.133040][ T6156] libceph: mon0 (1)[c::]:6789 connect error [ 168.170596][T13057] syzkaller0: entered promiscuous mode [ 168.172995][T13057] syzkaller0: entered allmulticast mode [ 168.254664][T13007] ceph: No mds server is up or the cluster is laggy [ 168.319739][T13076] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13076 comm=syz.3.1987 [ 168.405598][T13083] netlink: 'syz.0.1989': attribute type 64 has an invalid length. [ 168.408918][T13083] netlink: 'syz.0.1989': attribute type 4 has an invalid length. [ 168.511919][T13091] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 168.734992][T13108] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 168.763299][ T1462] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 168.945228][ T1462] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.948455][ T1462] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.952654][ T1462] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.958932][ T1462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.000669][T13122] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 169.004718][T13122] overlayfs: missing 'lowerdir' [ 169.055597][T13125] ufs: You didn't specify the type of your ufs filesystem [ 169.055597][T13125] [ 169.055597][T13125] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 169.055597][T13125] [ 169.055597][T13125] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 169.169143][ T1462] usb 6-1: usb_control_msg returned -32 [ 169.171826][ T1462] usbtmc 6-1:16.0: can't read capabilities [ 169.529268][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.535214][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.591383][ T1462] usb 6-1: USB disconnect, device number 10 [ 169.655915][T13150] vlan3: entered promiscuous mode [ 169.657614][T13150] bridge0: entered promiscuous mode [ 169.919415][T13163] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 169.923745][T13163] SELinux: failed to load policy [ 170.159157][T13185] (syz.0.2011,13185,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 170.161603][T13185] (syz.0.2011,13185,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 170.164421][T13185] (syz.0.2011,13185,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 170.167274][T13185] (syz.0.2011,13185,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 171.050560][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 171.050578][ T40] audit: type=1400 audit(1768931017.650:712): avc: denied { mount } for pid=13246 comm="syz.1.2021" name="/" dev="pstore" ino=6270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 171.056682][T13247] netlink: 'syz.1.2021': attribute type 7 has an invalid length. [ 171.169059][T13251] batman_adv: batadv0: Adding interface: gretap1 [ 171.171711][T13251] batman_adv: batadv0: Interface activated: gretap1 [ 172.347229][ T40] audit: type=1400 audit(1768931018.950:713): avc: denied { write } for pid=13315 comm="syz.3.2039" name="file0" dev="tmpfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.355502][ T40] audit: type=1400 audit(1768931018.950:714): avc: denied { ioctl } for pid=13315 comm="syz.3.2039" path="/596/file0" dev="tmpfs" ino=3232 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.370300][T13317] __nla_validate_parse: 8 callbacks suppressed [ 172.370317][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 172.444915][T13323] fuse: Bad value for 'fd' [ 172.470847][ T40] audit: type=1400 audit(1768931019.070:715): avc: denied { execute } for pid=13324 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 172.483444][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.486321][ T40] audit: type=1400 audit(1768931019.070:716): avc: denied { execute_no_trans } for pid=13324 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 172.548848][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.553035][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.557350][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.560273][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.562959][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.574052][ T5293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.577242][ T5293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.581641][ T5293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.585192][ T5293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.588434][ T5293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.653249][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 172.656600][ T29] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.660741][ T29] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.666888][ T29] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.672404][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 172.678398][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.682215][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.686147][ T29] usb 5-1: Product: syz [ 172.687532][ T29] usb 5-1: Manufacturer: syz [ 172.688581][T13325] vcan0 speed is unknown, defaulting to 1000 [ 172.689024][ T29] usb 5-1: SerialNumber: syz [ 172.874241][T13325] chnl_net:caif_netlink_parms(): no params data found [ 172.900312][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 172.976002][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.978888][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.982329][T13325] bridge_slave_0: entered allmulticast mode [ 172.985870][T13325] bridge_slave_0: entered promiscuous mode [ 172.989542][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.992149][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.994925][T13325] bridge_slave_1: entered allmulticast mode [ 172.997604][T13325] bridge_slave_1: entered promiscuous mode [ 173.019665][T13325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.024670][T13325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.047955][T13325] team0: Port device team_slave_0 added [ 173.051107][T13325] team0: Port device team_slave_1 added [ 173.071494][T13325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.074475][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.082603][T13325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.092578][T13325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.095932][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.105617][T13325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.130493][T13325] hsr_slave_0: entered promiscuous mode [ 173.133239][T13325] hsr_slave_1: entered promiscuous mode [ 173.136033][T13325] debugfs: 'hsr0' already exists in 'hsr' [ 173.137905][T13325] Cannot create hsr debugfs directory [ 173.224386][T13325] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.303133][T13325] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.325573][T13636] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 173.327770][T13636] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 173.332580][T13636] CIFS mount error: No usable UNC path provided in device string! [ 173.332580][T13636] [ 173.336244][T13636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.361377][T13325] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.377165][T13640] pimreg: entered allmulticast mode [ 173.379136][T13640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2048'. [ 173.426897][T13325] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.512336][T13655] ubi0: attaching mtd0 [ 173.517314][T13655] ubi0: scanning is finished [ 173.518869][T13655] ubi0: empty MTD device detected [ 173.559210][T13325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.570927][T13325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.575291][T13325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.581388][T13325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.598093][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.600442][T13325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.602911][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.605310][T13325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.615515][T13655] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 173.616932][ T5999] usb 5-1: USB disconnect, device number 20 [ 173.636204][T13325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.639247][ T5999] usblp0: removed [ 173.645873][T13325] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.650201][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.659046][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.671740][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.674217][T11640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.680823][T13692] netlink: 3900 bytes leftover after parsing attributes in process `syz.0.2052'. [ 173.685166][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.687585][T11641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.718015][T13325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.825102][T13325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.857569][T13325] veth0_vlan: entered promiscuous mode [ 173.865025][T13325] veth1_vlan: entered promiscuous mode [ 173.883771][ T40] audit: type=1400 audit(1768931020.490:717): avc: denied { listen } for pid=13711 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 173.896259][T13325] veth0_macvtap: entered promiscuous mode [ 173.900689][T13325] veth1_macvtap: entered promiscuous mode [ 173.910498][T13325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.917822][T13325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.929499][T11639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.933645][T11639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.938020][T11639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.941788][T11639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.001824][T11641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.004663][T11641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.022956][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 174.025732][T11639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.030067][T11639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.058688][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.065131][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.067061][ T40] audit: type=1400 audit(1768931020.670:718): avc: denied { mounton } for pid=13325 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 174.078247][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.078977][ T40] audit: type=1400 audit(1768931020.680:719): avc: denied { mounton } for pid=13325 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 174.090908][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.095852][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.192029][T13738] vcan0 speed is unknown, defaulting to 1000 [ 174.346201][T13738] chnl_net:caif_netlink_parms(): no params data found [ 174.361813][ T7649] bridge0: port 2(syz_tun) entered disabled state [ 174.371668][ T7649] syz_tun (unregistering): left allmulticast mode [ 174.374392][ T7649] syz_tun (unregistering): left promiscuous mode [ 174.376628][ T7649] bridge0: port 2(syz_tun) entered disabled state [ 174.430833][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.434644][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.437116][T13738] bridge_slave_0: entered allmulticast mode [ 174.441232][T13738] bridge_slave_0: entered promiscuous mode [ 174.446795][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.449913][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.453000][T13738] bridge_slave_1: entered allmulticast mode [ 174.457039][T13738] bridge_slave_1: entered promiscuous mode [ 174.480842][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.487419][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.511660][T13738] team0: Port device team_slave_0 added [ 174.516175][T13738] team0: Port device team_slave_1 added [ 174.531386][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.534163][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.542447][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.547061][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.549445][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.557886][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.582117][T13738] hsr_slave_0: entered promiscuous mode [ 174.584558][T13738] hsr_slave_1: entered promiscuous mode [ 174.587027][T13738] debugfs: 'hsr0' already exists in 'hsr' [ 174.588928][T13738] Cannot create hsr debugfs directory [ 174.605882][ T5944] Bluetooth: hci4: command tx timeout [ 174.665895][T11641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.778486][T11641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.806578][T13738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.810884][T13738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.816415][T13738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.820652][T13738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.843459][T11641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.859146][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.861474][T13738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.863913][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.866168][T13738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.872361][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.884253][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.914394][T11641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.949671][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.963873][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.971163][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.974265][T11642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.988563][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.990887][T11642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.025848][T14039] bond1: Removing last ns target with arp_interval on [ 175.072022][T14077] snd_dummy snd_dummy.0: control 5:3:199:syz0:12 is already present [ 175.110834][T14087] netlink: 'syz.1.2071': attribute type 21 has an invalid length. [ 175.114528][T14087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2071'. [ 175.118220][T13738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.124201][T14087] netlink: 'syz.1.2071': attribute type 4 has an invalid length. [ 175.127015][T14087] netlink: 'syz.1.2071': attribute type 3 has an invalid length. [ 175.129639][T14087] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2071'. [ 175.134677][T14087] 3.Nd: renamed from lo [ 175.138278][T14087] netlink: 'syz.1.2071': attribute type 21 has an invalid length. [ 175.140280][T11641] dummy0: left allmulticast mode [ 175.141072][T14087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2071'. [ 175.144229][T11641] bridge0: port 1(dummy0) entered disabled state [ 175.282189][T14104] overlayfs: conflicting lowerdir path [ 175.286223][T14104] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 175.288981][T14104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2073'. [ 175.409652][T11641] gretap0 (unregistering): left promiscuous mode [ 175.465855][T11641] bond2 (unregistering): (slave geneve2): Releasing active interface [ 175.911192][T11641] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 175.914114][T11641] bridge7 (unregistering): left promiscuous mode [ 176.117995][T11641] bond0 (unregistering): left promiscuous mode [ 176.120337][T11641] bond0 (unregistering): Released all slaves [ 176.121511][T11642] smc: removing ib device syz0 [ 176.125663][T11641] bond1 (unregistering): Released all slaves [ 176.133375][ T5944] Bluetooth: hci0: command tx timeout [ 176.218856][T11641] bond2 (unregistering): Released all slaves [ 176.225577][T11641] bond3 (unregistering): Released all slaves [ 176.231673][T11641] bond4 (unregistering): Released all slaves [ 176.315847][T11641] bond5 (unregistering): Released all slaves [ 176.403651][T11641] bond6 (unregistering): Released all slaves [ 176.485234][T11641] bond7 (unregistering): Released all slaves [ 176.492887][T11641] bond8 (unregistering): Released all slaves [ 176.499722][T14087] netlink: 'syz.1.2071': attribute type 4 has an invalid length. [ 176.502478][T14087] netlink: 'syz.1.2071': attribute type 3 has an invalid length. [ 176.505123][T14087] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2071'. [ 176.666350][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 176.682659][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.685809][ T5944] Bluetooth: hci4: command tx timeout [ 176.826683][ T40] audit: type=1804 audit(1768931023.430:720): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2080" name="/newroot/486/bus" dev="tmpfs" ino=2658 res=1 errno=0 [ 176.855797][T13738] veth0_vlan: entered promiscuous mode [ 176.862504][T13738] veth1_vlan: entered promiscuous mode [ 176.881885][T13738] veth0_macvtap: entered promiscuous mode [ 176.887957][T13738] veth1_macvtap: entered promiscuous mode [ 176.925312][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.933795][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.942454][ T8094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.945604][T14168] xt_NFQUEUE: number of total queues is 0 [ 176.952432][ T8094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.958385][ T8094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.961150][ T8094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.991481][T14149] tmpfs: Bad value for 'mpol' [ 177.061593][T11643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.065794][T14176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=14176 comm=syz.1.2083 [ 177.073143][T11643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.076006][T14176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14176 comm=syz.1.2083 [ 177.080919][T14176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=14176 comm=syz.1.2083 [ 177.097775][T14176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14176 comm=syz.1.2083 [ 177.148551][ T3853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.151903][ T3853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.162002][T14190] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 177.166172][T14190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.169990][T14190] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 177.198625][T14192] /dev/sg0: Can't lookup blockdev [ 177.245535][T11641] !: left promiscuous mode [ 177.314817][T11641] : left promiscuous mode [ 177.327596][T14201] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 177.401658][T11641] tipc: Left network mode [ 177.526377][T14215] __nla_validate_parse: 6 callbacks suppressed [ 177.526393][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 177.610933][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 177.652112][T14235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=14235 comm=syz.4.2094 [ 177.904678][T11641] veth0: left promiscuous mode [ 177.915929][T14254] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 177.940841][T11641] veth1_macvtap: left promiscuous mode [ 177.946681][T11641] veth0_macvtap: left promiscuous mode [ 177.949617][T11641] veth1_vlan: left promiscuous mode [ 177.952282][T11641] veth0_vlan: left promiscuous mode [ 178.156364][T11641] vlan0 (unregistering): left allmulticast mode [ 178.158274][T11641] veth0_vlan (unregistering): left allmulticast mode [ 178.167572][T14282] netlink: 'syz.3.2101': attribute type 11 has an invalid length. [ 178.203488][ T5944] Bluetooth: hci0: command tx timeout [ 178.243331][T14289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14289 comm=syz.3.2101 [ 178.672296][T11633] smc: removing ib device syz2 [ 178.693192][ T838] vcan0 speed is unknown, defaulting to 1000 [ 178.704828][ T838] syz2: Port: 1 Link DOWN [ 178.773474][ T5944] Bluetooth: hci4: command tx timeout [ 178.902255][T14341] hfs: can't find a HFS filesystem on dev sr0 [ 179.005323][T14360] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2109'. [ 179.008677][T14360] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2109'. [ 179.012073][T14360] JFS: charset not found [ 179.015603][ T40] audit: type=1400 audit(1768931025.620:721): avc: denied { write } for pid=14357 comm="syz.1.2109" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 179.025364][ T40] audit: type=1400 audit(1768931025.630:722): avc: denied { open } for pid=14357 comm="syz.1.2109" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 179.037235][ T40] audit: type=1400 audit(1768931025.630:723): avc: denied { ioctl } for pid=14357 comm="syz.1.2109" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 179.123420][ T1462] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.303207][ T1462] usb 5-1: Using ep0 maxpacket: 32 [ 179.309359][ T1462] usb 5-1: config 1 interface 0 altsetting 192 bulk endpoint 0x82 has invalid maxpacket 8 [ 179.312643][ T1462] usb 5-1: config 1 interface 0 has no altsetting 0 [ 179.319496][ T1462] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.335595][ T1462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.338278][ T1462] usb 5-1: Product: ఄ [ 179.339625][ T1462] usb 5-1: Manufacturer: ⠊ [ 179.341124][ T1462] usb 5-1: SerialNumber: 操疧瓽䚱걲Ꟈ凁䙜።䐌嘪惮뜔펲ⶲਬ饢⹤Ꭵ蜛늸逡솉ꆻ [ 179.350520][T14335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.558341][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.561301][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.569625][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.572582][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.577546][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.580549][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.586161][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.591096][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.600635][ T1462] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 179.605738][ T1462] usb 5-1: USB disconnect, device number 21 [ 179.621035][T14440] syzkaller0: entered promiscuous mode [ 179.622905][T14440] syzkaller0: entered allmulticast mode [ 179.648580][T14452] netlink: 'syz.4.2114': attribute type 4 has an invalid length. [ 179.652906][T11641] IPVS: stop unused estimator thread 0... [ 179.735832][T14461] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 179.795492][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 180.283640][ T5944] Bluetooth: hci0: command tx timeout [ 180.853448][ T5944] Bluetooth: hci4: command tx timeout [ 180.980633][T14587] SELinux: syz.1.2140 (14587) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 181.034807][T14596] netlink: 'syz.1.2140': attribute type 21 has an invalid length. [ 181.037223][T14596] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2140'. [ 181.233241][ T6017] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 181.403511][ T6017] usb 9-1: Using ep0 maxpacket: 8 [ 181.409420][ T6017] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.412538][ T6017] usb 9-1: config 0 has no interface number 0 [ 181.414767][ T6017] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.418202][ T6017] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.421097][ T6017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.425372][ T6017] usb 9-1: config 0 descriptor?? [ 181.429241][ T6017] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 181.629009][T14590] netem: incorrect gi model size [ 181.631311][T14590] netem: change failed [ 181.645060][T14590] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 181.647974][T14590] : renamed from lo (while UP) [ 181.653806][ T838] usb 9-1: USB disconnect, device number 2 [ 181.847601][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 182.079242][ T40] audit: type=1400 audit(1768931028.680:724): avc: denied { accept } for pid=14659 comm="syz.0.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.088403][ T40] audit: type=1400 audit(1768931028.680:725): avc: denied { listen } for pid=14659 comm="syz.0.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.202364][T14667] fuse: Bad value for 'user_id' [ 182.204162][T14667] fuse: Bad value for 'user_id' [ 182.206092][T14667] fuse: Bad value for 'user_id' [ 182.207809][T14667] fuse: Bad value for 'user_id' [ 182.209541][T14667] fuse: Bad value for 'user_id' [ 182.211083][T14667] fuse: Bad value for 'user_id' [ 182.212810][T14667] fuse: Bad value for 'user_id' [ 182.214811][T14667] fuse: Bad value for 'user_id' [ 182.216573][T14667] fuse: Bad value for 'user_id' [ 182.218222][T14667] fuse: Bad value for 'user_id' [ 182.220176][T14667] fuse: Bad value for 'user_id' [ 182.221780][T14667] fuse: Bad value for 'user_id' [ 182.223970][T14667] fuse: Bad value for 'user_id' [ 182.225545][T14667] fuse: Bad value for 'user_id' [ 182.227326][T14667] fuse: Bad value for 'user_id' [ 182.228906][T14667] fuse: Bad value for 'user_id' [ 182.230668][T14667] fuse: Bad value for 'user_id' [ 182.232209][T14667] fuse: Bad value for 'user_id' [ 182.235064][T14667] fuse: Bad value for 'user_id' [ 182.236776][T14667] fuse: Bad value for 'user_id' [ 182.238607][T14667] fuse: Bad value for 'user_id' [ 182.240141][T14667] fuse: Bad value for 'user_id' [ 182.242167][T14667] fuse: Bad value for 'user_id' [ 182.247091][T14667] fuse: Bad value for 'user_id' [ 182.249710][T14667] fuse: Bad value for 'user_id' [ 182.251264][T14667] fuse: Bad value for 'user_id' [ 182.253058][T14667] fuse: Bad value for 'user_id' [ 182.254761][T14667] fuse: Bad value for 'user_id' [ 182.256695][T14667] fuse: Bad value for 'user_id' [ 182.258264][T14667] fuse: Bad value for 'user_id' [ 182.260293][T14667] fuse: Bad value for 'user_id' [ 182.262343][T14667] fuse: Bad value for 'user_id' [ 182.265497][T14667] fuse: Bad value for 'user_id' [ 182.267367][T14667] fuse: Bad value for 'user_id' [ 182.270103][T14667] fuse: Bad value for 'user_id' [ 182.272509][T14667] fuse: Bad value for 'user_id' [ 182.274405][T14667] fuse: Bad value for 'user_id' [ 182.276164][T14667] fuse: Bad value for 'user_id' [ 182.278852][T14667] fuse: Bad value for 'user_id' [ 182.281069][T14667] fuse: Bad value for 'user_id' [ 182.284342][T14667] fuse: Bad value for 'user_id' [ 182.286106][T14667] fuse: Bad value for 'user_id' [ 182.288079][T14667] fuse: Bad value for 'user_id' [ 182.289917][T14667] fuse: Bad value for 'user_id' [ 182.291836][T14667] fuse: Bad value for 'user_id' [ 182.293942][T14667] fuse: Bad value for 'user_id' [ 182.295844][T14667] fuse: Bad value for 'user_id' [ 182.297384][T14667] fuse: Bad value for 'user_id' [ 182.299802][T14667] fuse: Bad value for 'user_id' [ 182.301753][T14667] fuse: Bad value for 'user_id' [ 182.303892][T14667] fuse: Bad value for 'user_id' [ 182.305554][T14667] fuse: Bad value for 'user_id' [ 182.307708][T14667] fuse: Bad value for 'user_id' [ 182.309610][T14667] fuse: Bad value for 'user_id' [ 182.311589][T14667] fuse: Bad value for 'user_id' [ 182.313398][T14667] fuse: Bad value for 'user_id' [ 182.315422][T14667] fuse: Bad value for 'user_id' [ 182.317058][T14667] fuse: Bad value for 'user_id' [ 182.319264][T14667] fuse: Bad value for 'user_id' [ 182.321265][T14667] fuse: Bad value for 'user_id' [ 182.325228][T14667] fuse: Bad value for 'user_id' [ 182.326798][T14667] fuse: Bad value for 'user_id' [ 182.328763][T14667] fuse: Bad value for 'user_id' [ 182.330649][T14667] fuse: Bad value for 'user_id' [ 182.363352][ T5944] Bluetooth: hci0: command tx timeout [ 182.451280][T14682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.470762][T14684] policy can only be matched on NF_INET_PRE_ROUTING [ 182.475001][T14684] unable to load match [ 182.604066][T14693] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 182.828250][T14700] sp0: Synchronizing with TNC [ 182.834458][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 183.594019][ T1462] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 183.755350][ T1462] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.759505][ T1462] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.765211][ T1462] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 183.770040][ T1462] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.774112][ T1462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.784670][T14726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.789528][ T1462] hub 5-1:1.0: bad descriptor, ignoring hub [ 183.792085][ T1462] hub 5-1:1.0: probe with driver hub failed with error -5 [ 183.795745][ T1462] cdc_wdm 5-1:1.0: skipping garbage [ 183.797988][ T1462] cdc_wdm 5-1:1.0: skipping garbage [ 183.802099][ T1462] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 183.806845][ T1462] cdc_wdm 5-1:1.0: Unknown control protocol [ 184.094187][ T54] usb 5-1: USB disconnect, device number 22 [ 184.443453][ T54] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 184.604747][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.608176][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.611111][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 184.620830][ T54] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 184.624242][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.629565][T14726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.634706][ T54] hub 5-1:1.0: bad descriptor, ignoring hub [ 184.637184][ T54] hub 5-1:1.0: probe with driver hub failed with error -5 [ 184.640057][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 184.641782][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 184.645632][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 184.649523][T14812] netlink: 'syz.3.2173': attribute type 11 has an invalid length. [ 184.651837][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 184.652283][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 184.660098][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 184.660739][T11633] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.666346][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 184.669727][T14812] netlink: 'syz.3.2173': attribute type 11 has an invalid length. [ 184.672978][T11633] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.677272][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 184.682305][T11633] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.695012][T11633] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.772028][ T40] audit: type=1400 audit(1768931031.370:726): avc: denied { setopt } for pid=14824 comm="syz.3.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.833757][T14726] netlink: 'syz.0.2164': attribute type 21 has an invalid length. [ 184.837956][T14726] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 184.914655][T14838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14838 comm=syz.3.2178 [ 184.948160][T14840] Cannot find add_set index 0 as target [ 184.963806][ T6017] usb 5-1: USB disconnect, device number 23 [ 185.446093][ T40] audit: type=1400 audit(1768931032.050:727): avc: denied { append } for pid=14861 comm="syz.4.2184" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.541574][T14871] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2188'. [ 185.601382][ T40] audit: type=1400 audit(1768931032.200:728): avc: denied { create } for pid=14870 comm="syz.0.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.638886][T14881] program syz.4.2189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.845950][ T40] audit: type=1400 audit(1768931032.450:729): avc: denied { shutdown } for pid=14893 comm="syz.3.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.852153][ T40] audit: type=1400 audit(1768931032.450:730): avc: denied { read } for pid=14893 comm="syz.3.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.919073][T14903] QAT: Stopping all acceleration devices. [ 185.923217][ T838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 186.011980][T14908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14908 comm=syz.0.2197 [ 186.018167][T14908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2197'. [ 186.082492][ T40] audit: type=1400 audit(1768931032.680:731): avc: denied { create } for pid=14914 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.083288][ T838] usb 9-1: Using ep0 maxpacket: 16 [ 186.095830][ T838] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.099881][ T838] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.103875][ T838] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.108054][ T838] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.111186][ T838] usb 9-1: config 0 interface 0 has no altsetting 0 [ 186.115208][ T838] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 186.118092][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.119884][ T40] audit: type=1400 audit(1768931032.720:732): avc: denied { name_bind } for pid=14918 comm="syz.0.2199" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 186.120569][ T838] usb 9-1: Product: syz [ 186.129309][ T838] usb 9-1: Manufacturer: syz [ 186.130816][ T838] usb 9-1: SerialNumber: syz [ 186.134778][ T838] usb 9-1: config 0 descriptor?? [ 186.194242][T14925] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 186.338053][T14933] SELinux: Context is not valid (left unmapped). [ 186.342269][ T838] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input22 [ 186.343352][T14933] SELinux: Context :syz3:M:00000000000000000002:GPL is not valid (left unmapped). [ 186.346752][ T5327] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 186.350656][T14933] (syz.3.2201,14933,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 186.355423][ T5327] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 186.360526][ T5327] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 186.367029][ T5327] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 186.547498][T14972] IPVS: Unknown mcast interface: pim6reg1 [ 186.568160][T14977] netlink: 'syz.1.2207': attribute type 15 has an invalid length. [ 186.570739][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 186.578568][T14977] netlink: 'syz.1.2207': attribute type 39 has an invalid length. [ 186.603947][T14883] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 186.612436][ T6156] usb 9-1: USB disconnect, device number 3 [ 186.715261][ T40] audit: type=1800 audit(1768931033.320:733): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2207" name="file0" dev="tmpfs" ino=2770 res=0 errno=0 [ 187.151739][T15031] (syz.4.2213,15031,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 187.154295][T15031] (syz.4.2213,15031,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 187.156658][T15031] (syz.4.2213,15031,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 187.159958][T15031] (syz.4.2213,15031,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 187.176943][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 187.176958][ T40] audit: type=1400 audit(1768931033.780:736): avc: denied { write } for pid=15030 comm="syz.4.2213" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 187.289453][ T40] audit: type=1400 audit(1768931033.890:737): avc: denied { mounton } for pid=15030 comm="syz.4.2213" path="/37/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 187.293329][T15031] tmpfs: Bad value for 'gid' [ 187.299740][T15031] tmpfs: Bad value for 'gid' [ 187.335027][T15166] Bluetooth: MGMT ver 1.23 [ 187.729233][T15188] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2223'. [ 187.751152][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'. [ 199.168619][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.510169][T15293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.516661][T15293] binder: 15290:15293 ioctl d000943d 2000000e6840 returned -22 [ 200.519949][T15296] nfs4: Unknown parameter '' [ 200.522938][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.548307][T15295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.583942][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 200.588059][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 200.600904][T15287] veth1_macvtap: left promiscuous mode [ 200.611301][T15316] kAFS: unparsable volume name [ 200.613809][T15316] netlink: 'syz.0.2237': attribute type 21 has an invalid length. [ 200.630387][T15316] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2237'. [ 200.630638][T15288] [ 200.635116][T15288] ====================================================== [ 200.638361][T15288] WARNING: possible circular locking dependency detected [ 200.641248][T15288] syzkaller #0 Tainted: G L [ 200.643903][T15288] ------------------------------------------------------ [ 200.646831][T15288] syz.1.2233/15288 is trying to acquire lock: [ 200.649416][T15288] ffff8881044ab5a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x19e/0x500 [ 200.653725][T15288] [ 200.653725][T15288] but task is already holding lock: [ 200.656878][T15288] ffff8880276fdc08 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 200.660328][T15288] [ 200.660328][T15288] which lock already depends on the new lock. [ 200.660328][T15288] [ 200.664499][T15288] [ 200.664499][T15288] the existing dependency chain (in reverse order) is: [ 200.668179][T15288] [ 200.668179][T15288] -> #2 (vm_lock){++++}-{0:0}: [ 200.671004][T15288] __vma_enter_locked+0x260/0x770 [ 200.673304][T15288] __vma_start_write+0x21/0x160 [ 200.675544][T15288] mprotect_fixup+0x4e3/0xb80 [ 200.677756][T15288] setup_arg_pages+0x4a2/0xbb0 [ 200.679960][T15288] load_elf_binary+0xb5b/0x4fe0 [ 200.682210][T15288] bprm_execve+0x8c2/0x1620 [ 200.684303][T15288] kernel_execve+0x2ef/0x3b0 [ 200.686424][T15288] kernel_init+0x14a/0x2b0 [ 200.688520][T15288] ret_from_fork+0x983/0xb10 [ 200.690629][T15288] ret_from_fork_asm+0x1a/0x30 [ 200.692842][T15288] [ 200.692842][T15288] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 200.696045][T15288] __might_fault+0x113/0x190 [ 200.698026][T15288] _copy_to_iter+0x1c2/0x1710 [ 200.699638][T15288] copy_page_to_iter+0x12a/0x1e0 [ 200.701357][T15288] filemap_read+0x6b1/0xe40 [ 200.702957][T15288] blkdev_read_iter+0x1ac/0x500 [ 200.704642][T15288] vfs_read+0x8bf/0xcf0 [ 200.706192][T15288] ksys_read+0x12a/0x250 [ 200.707757][T15288] do_syscall_64+0xcd/0xf80 [ 200.709332][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.711328][T15288] [ 200.711328][T15288] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{4:4}: [ 200.714042][T15288] __lock_acquire+0x1669/0x2890 [ 200.715726][T15288] lock_acquire+0x179/0x330 [ 200.717326][T15288] down_read+0x9b/0x460 [ 200.718848][T15288] blkdev_read_iter+0x19e/0x500 [ 200.720524][T15288] __kernel_read+0x3f3/0xbf0 [ 200.722157][T15288] freader_fetch+0x1d7/0x9d0 [ 200.723759][T15288] __build_id_parse.isra.0+0xdd/0x6c0 [ 200.725609][T15288] do_procmap_query+0xb0e/0x1080 [ 200.727329][T15288] procfs_procmap_ioctl+0x9d/0xe0 [ 200.729154][T15288] __x64_sys_ioctl+0x18e/0x210 [ 200.730836][T15288] do_syscall_64+0xcd/0xf80 [ 200.732452][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.734457][T15288] [ 200.734457][T15288] other info that might help us debug this: [ 200.734457][T15288] [ 200.737686][T15288] Chain exists of: [ 200.737686][T15288] &sb->s_type->i_mutex_key#8 --> &mm->mmap_lock --> vm_lock [ 200.737686][T15288] [ 200.741748][T15288] Possible unsafe locking scenario: [ 200.741748][T15288] [ 200.744032][T15288] CPU0 CPU1 [ 200.745747][T15288] ---- ---- [ 200.747377][T15288] rlock(vm_lock); [ 200.748649][T15288] lock(&mm->mmap_lock); [ 200.750821][T15288] lock(vm_lock); [ 200.752975][T15288] rlock(&sb->s_type->i_mutex_key#8); [ 200.754745][T15288] [ 200.754745][T15288] *** DEADLOCK *** [ 200.754745][T15288] [ 200.757327][T15288] 1 lock held by syz.1.2233/15288: [ 200.759030][T15288] #0: ffff8880276fdc08 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 200.761764][T15288] [ 200.761764][T15288] stack backtrace: [ 200.763619][T15288] CPU: 3 UID: 0 PID: 15288 Comm: syz.1.2233 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.763634][T15288] Tainted: [L]=SOFTLOCKUP [ 200.763638][T15288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.763644][T15288] Call Trace: [ 200.763647][T15288] [ 200.763652][T15288] dump_stack_lvl+0x116/0x1f0 [ 200.763668][T15288] print_circular_bug+0x275/0x340 [ 200.763681][T15288] check_noncircular+0x146/0x160 [ 200.763693][T15288] __lock_acquire+0x1669/0x2890 [ 200.763707][T15288] lock_acquire+0x179/0x330 [ 200.763718][T15288] ? blkdev_read_iter+0x19e/0x500 [ 200.763730][T15288] ? __pfx___might_resched+0x10/0x10 [ 200.763740][T15288] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.763752][T15288] down_read+0x9b/0x460 [ 200.763761][T15288] ? blkdev_read_iter+0x19e/0x500 [ 200.763770][T15288] ? register_lock_class+0x41/0x4b0 [ 200.763782][T15288] ? __pfx_down_read+0x10/0x10 [ 200.763792][T15288] blkdev_read_iter+0x19e/0x500 [ 200.763803][T15288] __kernel_read+0x3f3/0xbf0 [ 200.763816][T15288] ? __pfx___kernel_read+0x10/0x10 [ 200.763831][T15288] ? __pfx_vma_start_read+0x10/0x10 [ 200.763847][T15288] freader_fetch+0x1d7/0x9d0 [ 200.763859][T15288] ? reacquire_held_locks+0xcd/0x1f0 [ 200.763870][T15288] ? lock_next_vma+0x10e/0xed0 [ 200.763885][T15288] ? __pfx_freader_fetch+0x10/0x10 [ 200.763897][T15288] ? __asan_memset+0x23/0x50 [ 200.763908][T15288] __build_id_parse.isra.0+0xdd/0x6c0 [ 200.763920][T15288] ? query_matching_vma+0x48e/0x7d0 [ 200.763932][T15288] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 200.763950][T15288] do_procmap_query+0xb0e/0x1080 [ 200.763962][T15288] ? __pfx_do_procmap_query+0x10/0x10 [ 200.763975][T15288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.763986][T15288] ? do_vfs_ioctl+0x128/0x14f0 [ 200.763999][T15288] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 200.764022][T15288] ? selinux_file_ioctl+0x180/0x270 [ 200.764039][T15288] ? selinux_file_ioctl+0xb4/0x270 [ 200.764056][T15288] procfs_procmap_ioctl+0x9d/0xe0 [ 200.764070][T15288] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 200.764085][T15288] __x64_sys_ioctl+0x18e/0x210 [ 200.764101][T15288] do_syscall_64+0xcd/0xf80 [ 200.764116][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.764127][T15288] RIP: 0033:0x7f26c9f8f7c9 [ 200.764136][T15288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.764146][T15288] RSP: 002b:00007f26cad95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.764155][T15288] RAX: ffffffffffffffda RBX: 00007f26ca1e6090 RCX: 00007f26c9f8f7c9 [ 200.764161][T15288] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000008 [ 200.764167][T15288] RBP: 00007f26ca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.764173][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.764179][T15288] R13: 00007f26ca1e6128 R14: 00007f26ca1e6090 R15: 00007ffec428e498 [ 200.764188][T15288] [ 200.884805][ T6017] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.033177][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 201.037682][ T6017] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 201.041370][ T6017] usb 5-1: config 0 has no interface number 0 [ 201.044120][ T6017] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.048763][ T6017] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 201.053705][ T6017] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 236, changing to 11 [ 201.057441][ T6017] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 201.061154][ T6017] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.065800][ T6017] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 201.068834][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.072401][ T6017] usb 5-1: config 0 descriptor?? [ 201.074961][T15316] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.078704][ T6017] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 201.278617][T15316] kAFS: No cell specified [ 201.287990][ T6017] usb 5-1: USB disconnect, device number 24 [ 201.290915][ T6017] ldusb 5-1:0.55: LD USB Device #0 now disconnected