last executing test programs: 7.999525735s ago: executing program 3 (id=797): socket(0x28, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3, &(0x7f00000002c0)=[r1, 0x0, 0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f00007c3000/0x3000)=nil, 0x3000}) 7.820707679s ago: executing program 3 (id=801): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0x85b48000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xd, 0x7}]}) write$ppp(r3, &(0x7f00000006c0)="188f", 0x2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x81) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="1fd7e0c2"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) 6.208069612s ago: executing program 3 (id=818): r0 = syz_clone(0x1000000, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3800000081fd014d"}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x3, 0x0, 0x7, 0xffff, 0x5, 0x1, 0x2, 0xffffffffffffffff]}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0x2, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000002180)=""/62, 0x3e}, {&(0x7f0000000000)=""/152, 0x98}], 0x2, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/223, 0xdf}], 0x1, 0x0) 3.118260382s ago: executing program 3 (id=872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x79, 0x59, ""/89}, &(0x7f00000000c0)=0x79, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) listen(r0, 0x40000000) sendto$inet6(r1, 0x0, 0x0, 0x4, 0x0, 0x0) 2.737433346s ago: executing program 3 (id=882): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x80) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$tun(r2, &(0x7f0000000040)={@void, @void, @llc={@snap={0x0, 0xab, "b7", "a9e3e4", 0x5, "5d9577ec282283afe0461878c5ec685c3bf4bedca72410fe3f9570364c43cdb68f5e7c4cee8d964fb0840c74a32f67cf8cef439f25eb8814e635e208464e6f22"}}}, 0x48) r3 = dup(r1) close_range(r2, r2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x6, 0x6, {{0x20, 0x4, 0x1, 0x7, 0x80, 0x64, 0x0, 0x6, 0x4, 0x0, @remote, @private=0xa010100, {[@timestamp={0x44, 0x24, 0xbb, 0x0, 0x1, [0x10001, 0xc0000000, 0x0, 0x1f6a, 0x2, 0xf223, 0x1ff, 0x7]}, @generic={0x94, 0x12, "4de0bdd6d354a480712fc49d44ac0f1d"}, @rr={0x7, 0xb, 0xb6, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xdf, [@dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0x11, "7253fb8afadd1c5eacdc5107856d99"}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r5, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/176, 0xb0, 0x0, &(0x7f0000000600)=""/220, 0xdc}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xf, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x3f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf8000000}}, @generic={0x4f, 0x9, 0xd, 0x800}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000800)='GPL\x00', 0x3, 0x74, &(0x7f0000000840)=""/116, 0x41100, 0x9, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xa, 0x2444c3a8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r3, r3, r2, r3, r5, r3, r3, r2, r2, r3], 0x0, 0x10, 0xe82}, 0x94) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x2, '\x00', 0x0, r2, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x13, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7107}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9cfb, 0x9e, &(0x7f0000000300)=""/158, 0x41100, 0x53, '\x00', r7, @fallback=0x2f, r5, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x3, 0x8, 0x401}, 0x10, r8, r9, 0xa, &(0x7f0000000b00)=[r2, r3, r5, r10, r11, 0xffffffffffffffff, r5], &(0x7f0000000b40)=[{0x0, 0x2, 0x9, 0x8}, {0x0, 0x4, 0x5, 0x1}, {0x1, 0x2, 0x7, 0x2}, {0x2, 0x4, 0x3, 0x1}, {0x3, 0x5, 0x5}, {0x0, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x9}, {0x2, 0x1, 0x10, 0x8}, {0x2, 0x2, 0x2, 0xa}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x3}, 0x94) write$binfmt_misc(r2, &(0x7f0000000cc0)="6f9a4b050cfef0732381a735", 0xc) mkdir(&(0x7f0000000d00)='./file0\x00', 0x80) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000d40)={0x3, 0x7d, 0x7, 0x8, 0x10, 0xff}) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) close(r6) setitimer(0x1, &(0x7f0000000e00)={{0x0, 0xea60}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000ec0)={r0}, 0x1) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf4, r12, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x73, 0x5, "31e6e2c5c0eae92b19ee02466eb931256662382ceff141084bbc820edea526ff3000c9cebe450d515f09e51868cdfbf61093cc81464aa025f6751fdc1f23bbdab2b0ff9d2dc01bbdb6ddcf1f3c643841239f5cd268fb34ff1b554fffdde0710b12bba8cf895eac24809909d410b43e"}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4044054}, 0x20000000) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'team_slave_1\x00'}) bind$netrom(r11, &(0x7f0000001140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000011c0)=0x2, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000001200)=0x8) 2.586980619s ago: executing program 3 (id=884): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aa1ef40ac0545023a0a0102030109021200010400000009041c0000034a02"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002400ce055622c000000050a01020000000000000000010000000c00024000000000000500010900010073797a310000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400"], 0xe4}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) r3 = syz_open_procfs(r1, &(0x7f0000000500)='personality\x00') timerfd_settime(r3, 0x2, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, &(0x7f0000000580)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4771], [0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000600000000000000000000000000000000000000000000000100000000000000070000000000000000000000000000000000040000000000e80a0000000000000000000002000200700000008000000000000000000000000000bb000000000000000000"], 0x104}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 1.74959528s ago: executing program 1 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500931c793e14000400766c616e300000000000000000bb000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003000400020004000200040004000400060008001780040003001c00178004000500040004"], 0x138}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aa1ef40ac0545023a0a0102030109021200010400000009041c0000034a02"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000480)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4771], [0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500931c793e14000400766c616e300000000000000000bb000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003000400020004000200040004000400060008001780040003001c00178004000500040004"], 0x138}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aa1ef40ac0545023a0a0102030109021200010400000009041c0000034a02"], 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000480)) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4771], [0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) 1.046667466s ago: executing program 1 (id=909): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x28000}, 0x4040010) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x0) 987.113186ms ago: executing program 2 (id=910): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], &(0x7f0000000100)=""/217, 0x3e, 0xd9, 0x1, 0xa52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000680), 0x2000006c, r5}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r6, r6, 0x0, 0x0, 0x2}) syz_clone3(&(0x7f00000001c0)={0x102820000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 939.394559ms ago: executing program 1 (id=911): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121841, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x23, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r4, 0x80000000) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x10004, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x988) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x5d6, @loopback, 0xf}}}, 0x90) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r5, @ANYBLOB="a15476e28c7ffb77ce88f646c5a5228b7a83197ec42d38624b974ff61b04ace65fc53d78a98cbab8007565950322"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 860.656553ms ago: executing program 1 (id=912): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xac, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="4800e75eb700", 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 859.712022ms ago: executing program 1 (id=913): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100, 0x0) madvise(&(0x7f0000265000/0x4000)=nil, 0x4000, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x4}}], 0x1c) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0xffffffff]}}], 0x1c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x4, 0x0, 0xfff, 0x401, 0x0, 0x1, 0x2, 0xb}}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 730.858613ms ago: executing program 2 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x2c}}, 0x894) syz_genetlink_get_family_id$nfc(0x0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x5098f7256d8c4285, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040844) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088c4}, 0x9000) 648.148652ms ago: executing program 2 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 647.425719ms ago: executing program 1 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {0xfff2, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="9dd23f50b2"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000180)=""/81) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000340)=0x8, 0x4) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e0001006970366572730ebb6e0000001400028008000400000000200600020030000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 536.497019ms ago: executing program 2 (id=919): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x24408, &(0x7f0000000140)={[{@uuid_on}, {@redirect_dir_follow}, {@uuid_null}, {@index_off}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x16, 0x0, 0x1ec, 0x0}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x8b, 0x1, 0x40}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x2, 0xa}, {0x6, 0x101, 0x0, 0x200, 0x8465}}}}, 0x17) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x1000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000d97039783ebb3f0000", @ANYBLOB="98816376233d72a66f832be153c55c84310704000000fedbdf2538000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0002006e657464"], 0x60}, 0x1, 0x2, 0x0, 0x80}, 0x0) getxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)=@known='system.sockprotoname\x00', &(0x7f0000000340)=""/113, 0x71) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x10e) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1a39be, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/rt6_stats\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) unlink(&(0x7f00000002c0)='./file0/file0\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) 260.407793ms ago: executing program 2 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 187.000527ms ago: executing program 0 (id=923): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/81) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair(0x2c, 0x800, 0xa, &(0x7f00000000c0)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffc0000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x0, "6040a7190200002000004f597cdc90d22b6000000006ff00", 0x38415262}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1, @empty, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x7, "8a8bffffffffcb77e742d91e27fb2f1500", "e24fcb751eeaa8add0b2f075633f64c7", {"10fa9742846dea296c9d16d6e1249908", "51c9972412654f5d0800"}}}}}}}}, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r5, &(0x7f0000000180)=""/174, 0xae) 186.486504ms ago: executing program 0 (id=924): r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x401) r1 = mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x32988573e98fe4c3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r0}, @enter_looper, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/219, 0xdb, 0x0, 0x2f}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @clear_death, @dead_binder_done, @increfs_done, @release={0x40046306, 0x3}, @register_looper], 0x1000, 0x0, &(0x7f0000000f40)="3a5496bfceda0ee0168791a89145a0a9389f854c19bc56b61ebe67c08eaff816fe8dffa04d12262981e4b7aaa832aac51e6b555a2c73a5911b6b57cfbe5fa40a3e41a0f1b0d6d65ae422aba425ec9ebc8bffdc414d22afe97f8f1a016c819e7422afd6893f9957ea138c1e62db067e6cc0ec7d5109fd5df5c9db92bc1d0aedd324c65e5f761be4057a95a5498b6f71339b4b4d7ae8fafc06bbf7562d00b6b5c7a12cdc464fcd8138c5415ed4d4b8026017a2abb33f577d8cd2b7babaaa5b5b323dd77ecd20516b07800c0de7a30a691e7f2f33368e514411eead2abdbc1df58af951f00537fba237c8b3e82b6c570aec82d069d40c862f5962c77d7707b2be6ed2d62e4f33ba9792f61517e600e9377e3923e92b91b20125a6dbcceb6c8316423a0ae6af600b320c5da2f1328c736bc587c1ffbe0f7918d90265c3ada96e6cc20d37558ddc7d7c758cd9e78c36b9a36f546ed5fc866e296d5fb87aaed9710302deb5380ba7326ba7b6f41fc677045c02836408b38fd10d1e4d085569e33261b0a2a079544f719a03656455a204f6b7d04c180aadaf4826bb74dcfa59ca2d88736ceb5c1f0eae038488609f4ca35ed5bcffe646842fd220a495cc638d73ba683ac3f14b947ad3fc225a650cab77df2456f7d23e143c5e8d80c983a5a27c3d9ccc065d27bce8be6f18c8c9e8330dd71a69a035d13b908e6c2c696d3b6d0276333fbdab7c1033b67d777b040a0a5c296fa5ec33d6a28b99358a9664811ae18a11d09516093e48fdf5b1e17b6bb1cdd4d2672d1ea6d56ec0381557a1f1450482d814ed82f59e1e79b3eabe80881af90d4f9c6d349af239efcf5861607b079925cdddc3ea2ea3d6944f40f5f1600bf37a1a3ca2630152c7fee98a661eb4ad756f1a5b8f830555c6b6fb8e0205b3fe9c8df8801cf8faa6c7f503b66ebd331301a801f511ed09bb8385a20ade1f801f4668ea1472492daa41bd978214a2610bce41d2f86bd56f861d86bc3331b32f3e94f226282741435491d8c8c5fded2229b665b2481c5631b430206308166ecd3012ee70381854d80fb6e4c42b0f1ef7e8eac39ebb957d7c200911c6316ec8410f2605d74ae2685ebb68b142502f36beb466b85cad7d6a00f7f4f6a1b597a34b25254ba891ffc84d98908c0ee35e0c3928cfc35fcbb91d24ddd010f801c93fcd5d9d0f6f5be4565701254ed216b13bf78fcdb77b21739b84cdacd082c66e79467bf1d1a30601ac16bf56d7baf51bc1ddcd8f0abc55468813615df90a462d57514021e135a21c8e4114cfde8ffdf4c5b25c6c084f06b77185d723446a8f8f554969cda5185564e6e98f29adf202c358ce5a914a6ac9c9aa54d4dcad654e763368d8102a43565c7489ff572ba40a3b861c1271f5a2c9c8a19592c62cdb2e2a538f261f6d35ff612703e0fd57dcd7e410c8975e9a61dd237473e7beb9694c8bae6b9a46c07f9ea1dc01abf229b65bfed155b5c98e409b3c2dfdd98f65d49db53be136938b0e537fbb7e3d5582766a393c45c862c118afef27853556ffa4d6ad473f46ffe92cff008a59b46c3d3d626e04add0d4d04e2c0660678bb8a2c54e1abb4654b93d5d6755493e0f67e25a182aef94280502a1381c0beb5ebc4b889c708773aba16171e974ec5e8122960f61e81e9c55c3f9f52225122d5f8e83c84d7e7ce0ab6abca5bc3b5263bec7f29ccbef0b5de38f9a83db40928ac02478ede8f42464c2d4ab860c2dcbfd1cd3c637cb6c2be1de482b86d3d962c950b552baa710ef84b89f6a76bec1c2475d87c9e249eb5e6791ce206346ed6ae28766a062bbf765300fff49aed326501eb5a4563b7eefedb939db19b8eb7411621f32af5ce70e2d0feaa7f0b668dc7f828fb1582bd28bd764979b46d32baab170ae5eb98a8cd9066d57b6d3f93003c7363b1a1b2bb3f5a430290a9ea5c17c7caa62c6336fab2ab014d3d5ac1a3195651ccf3cfbf3f484d870ac0d15eadad1564132050897f1bc7614b973ad94a1006aa47bebcb2ee7a8aaaf436e002d2a0698ca2f921a98d8a1b57c3a643255d9787c1452ad61997a88750cad63e5dd1858bf1f108e49b80b4536864eb432a184885652e097df6d09a9d2f1f3cc9000cd94402d5a16dd0c6422bd6c02bf7dcda2611a76992e4550ae6dc24bf1c1ef702e30469a6ba2f259729f35c83436e675c82dd6fa0c3559a22513c5bfc15a6a12777e7b25fb620aa4b2b257c6ca641e6f155ffe11b94ad6ba986e2b3f80e04aba7f09721248bb8c8655251afe8305d1463552ad916e063b906e9ca29ecbf218b01da577aef5f58367b662603e77e9893d479d7e289d8b7c8e6e7c8066de621647565e923eac341099a930650e04371b696996509396b47c72d12e023e777b8b5d83c8869ffa7b90a2db2ee8f0af2c9a002db45f4d366ccf7c07dd4e85510ab35f5c3adf07ccf573afb335cecac5eac04d336296cf87f3e962e3fad95e8b51566abe9074b50e2c207bde901d7d93553e7975b9f2c24ff1253ff483bf132ffcb49ff2b48f7a051cf792ce2b4d6eb5ad66acab809405615e3fbd497dfd1857cfb9c2b65ab8961e84234197497888936de0763f427b98f9c199d510de93350ef5eaf14977294ec60b057eca87f3e4dfeb56097b4251d099119dd672b38dabcca46818349f3535f70e68f687d4ccb19e14a0ebd76ec32c534b310257a31b9a1a90a275b158009d5a4de8649d9b8c6a0ecf197e24d5e121ef045fe3248194fdaa4b0b47131a06fff14f3e094cd89b5af54a75bc604bffc2ba15a64497805f11fa4ed25c7caa5fc21469dc7aa6b8f2225bfd25e5f4c157af43c7e968338ca67bd7dad59b1f89a3c9d58f8adb1f590f93d239e5f76b2834efa0da5b0824884060eb938268800d8322546989fee0a900fa7862518e186ec9e22766b5711b4437fbd29b8b7f056ba0a594ab174a037f034bcd89713e4b0cac992efef22ceb693b6b54236dad0b806fd6aed6cefef8ce4a95f58cc28c5363eec37d0c5cb3eb8dd3e4a6cf5b843ac2dcbd728b6b0f75a87bc2e2b31a30460a9a416a50b08d094d938e0c0827186a5294bf8f5defe4b4ae6ae5fe3800b7d4af6ab9e8310780d2c9db0d4a5989988897e729dc7c8bb5093f7f18027c91409ac1ac75052ce0ada5ee76674c0dfb9261d8f9f4b73e7d5da6f8bed6fb848c19fafad3fc4d90f84af7261ed08571457b4486ff03e454609298999baab3f3443e316f1c3a7d51025c092198860e5e9669c0f1c82f6b307c37370c79ef8c8693b01de05bb98f24e690db2f2f51042bc1adc9f77595d89a1569a7ea0efde592e8bee19b3a27987d0dfa44ddde8f9d23f330cfbfc1bbc54f7ad1bc08e6cec1929de367fe42bfc7d416c381b8e17a91aa2bb441e3ddf3df749e2adf39fb89920d7b0704cec73d1bb149b48c72c1d3929c76d08bfea1b9c68e9248d782d526fbec7f665be6ea8d81293300c247e478dbe82a492ffefe30c5edafd108c5aebbf8a06204dbda68813b7a52fe6996eb4cbd6b94c5e0d0f6a4836e23688172a0157bedf9d20125054d3fe940d400c292d8669df93d72fa982d4936f596e683912da09ef06a5125a8ef08443885132d9646f5be3b5859386f0e8abc5a4e34a57b8dd1831af7b4bfb38245117514b7961e743e5fe3105b7ca26f236b9f8d49cd518a4f2a11b56f20a7b95dc10348f64d66e6d8ba2e084785650fb623592d545470b0c8831b5f5803af629520589e5afd68d26244fb1df1eb20972951d2f76d82b259dce33844230ac6055995e6ba6e1734cd251d8c8072a4745be833fc4d3390be8e5c03dac2dc3898cfb7b9ba7db113ed2a4a699a8ae7cbbd996450272ccf0ddcd9049d757ead1dc17b3d21a09a5edcaa548a53259dc7b797da0da689c8a6e458cdffd79cdad07a1161f534fb2db61501ac1da205632495e494ab2fcdf4836ba891116655ceeddcb4805e50b6c75fc290db8629377801394e856c93f941c4924599c287ffd51906ad753b6a6a003cab0cc89acc167bcfaeb46bc0c36e1b0d766c19f9ca78de0b2e79f0001bb696b4679ed7fc95a5553c6f248b0ebe549be291f819da1cf95f7864bfe261b87f634eecda7f0e5eeddb5021331a9312578faad4ecf559f5f418fd4ca4afbb0fe1ae269cd3b7859e91023c98a09ea06efe8ea57d141a600edc6e1caccc0cd9f62e402a121f5cb25033a9819ef45e1f318a778598e1afbde84c02882a8a846d7a13a9e5b0876e843052b7628a11a0f0dc4c80d35a653c61065a296b8ef5b38c575b163b67b8eb6976a728d97133d8f0877cd3af8c3bfc999c09604a0f2266bede2f903b67e383793cb084cceb0d796d0d22bf8d0e7d897be82e12536abb8affbf9162d7afde0305574de0a510aa31e35ed2eb73ddc088b6939f17a0d5fbf35400986fdda04fd3b7f308ead9a35cc226f6b19d1a45943e75ecfff77ae45f2dcf464367c878d7edd815745398e773499fbc07b308ca79ac032856a19b04a3782c08260f26c9492b543c065095a0bcc81b5a9d2b7c782723e196530023e352fd60a3b7f5dc0b63ecd58e1624f381bc822f322382949ac2e7e0cdaf8cad30008a7f77cfe474ed6a43f3b9053deda9c1b3d54071802b970a6451bd7575c2288f6b35d696bb9708288a5aee87cdcedfeadee688a48ea6faf514ee443884607241ea91aa042de69db686663426f02c07a886b6e50bfe9d1841e820efbb5da28d674a9b0ea8809b376208dca185f5caea45c93189873847307cdedaa1321d5ab7719f65df8c88007489de2abbf7c3ac856aa62322f51bda8531603a0dc1f6c68d23ba13ddbd115fab211b68ad650131c969cbc1c88707fa0e129a74d8ea8e59465dafb309bc445f1493147919a4264f4f70643b9a24338593e242f6cc1a117f0e90bde3d1f151921b4f23b887ec8f70476e60bbb43e9986d4253d09cfee8e89b3641e3baf95726e6f19d146cda900ade14b939cd7077ab961e3c339e8d2038a92587dc3b7ee981cff4f9002e2bfb10e62c72fd934653c38ab228898375da4799becc3d414c9cea1c556a86422eeba2254d0601c1b228ac6c84c746eb236af1ab68c1601c98ef0af2587c51973a61ee7b42e5726e78e7cdb0074c40f37caf184bf9ed1208ca0c39fff1be65581c90b8f8e8f6127e1b33b153c71227a341c41d3cfeb288552b23183be09ab9dea928ee2d30790c8369c4b1fdd349d0496bfb86bec53698a532b5eb7d91117f1c1b8909e0477400e86f530211f9d49a7183144fb4b43c564d40a01d4d4669a35feb7f3b4dbd1b7b3946f0b97275ac510b87f6674cf753da6ff1c07125ec1fd537d228676fdfc04da42629d3de81c1dfa9c6e44055159779bc3e62d43028d3700403967a4465a74d760e26b104322302755e3e294616027d3912941479c98f817ae5c5126361d1cf6f8975e6963ad367614af9ceb22de50d8ec009778300c3f2e74f02458dc6a62567249ba88ba89d9828fe96946771f642dbda22684038bcfb3970499d16e9d845ac51b46bd95140a2a8e062a7ed079200c2c0f99d8cbc3d756a12548497c55a20d9051504ac5a72a9a5947351b491ea29e70b7388282e6113e8a8c8aa3b0b584f2128b738f33b8ecb923df134710a4dc209a0ff6a4aafdc7059fdcdec965f166e75aefe5870535a0a7f7f47e81d796e59471a6ceb6b842c27276bab02fdd9a36062d06171625f836d53d0b7cccd3adb00d9787c2b2d1fc95369ec3be9375b59512bff76bc0264483041a51b87634043d46c9b275866067dab713e5532a"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0xb017, 0x7, 0x0, 0x1, 0x5, 0xaae5, 0xab5a, 0x7f, 0x4, 0x5, 0x1, 0x9, 0x4, 0x3, 0x10, 0x1, {0xffff, 0xc}, 0xf7, 0xf}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c14009078ac1414bb00"/42], 0x0) 90.175623ms ago: executing program 0 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000180)={0x18, 0x0, 0x1280, 0xffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0x401, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8c7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x572}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) socket(0x40000000015, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000e8ffffff000000000800851edbd7281816b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000340)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) sysinfo(&(0x7f00000001c0)=""/129) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtaction={0x154, 0x30, 0x1, 0x0, 0x0, {}, [{0x140, 0x1, [@m_vlan={0x13c, 0x1, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x7, 0x1, 0xb}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x3}}]}, {0xcf, 0x6, "fcfbc1330c69fc9c7df2d212658ea509c1ba5a0592c873d0c72a6da5cd8c495c0a47e9c3b538fc17a2ac6f454ace242e8e393f1d3b16e210629ed891374221e05663c45a6fb197fbe5396cc67679cdbc45adfb892e1c6289370595c9785042735c3b8771420fb90d5fa53fefe34fd918ce2e977178eae661a5c406f1c07b631f8cedb20c9944440b2d72682be8766fff7f66465fafafebe76ee174be09cfd45efe787436131fb53393f286be8870668ee902b5ca3976d2c938a028ac853d5fc0461e8af7a56f79790a82d9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 88.301654ms ago: executing program 2 (id=926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000011006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040885}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 86.264607ms ago: executing program 0 (id=927): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000022c0)=""/181, 0xb5) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) syz_fuse_handle_req(r1, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0xfffffffffffffffd, {0xcb5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5, 0x7, 0x35314258, 0x8, 0x7, [{0x7}, {0x1, 0xc}, {0x6, 0x80000001}, {0x6, 0x6}, {0xe, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0xe1, 0x2}], 0x4, 0xe, 0x6, 0x0, 0x4}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002380)=0xa) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x17, 0x10d, 0x0, 0x0, @binary="b669019f45719e4c0d95279ada9accde47f193"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, 0x0, 0x0) 686.877µs ago: executing program 0 (id=928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=929): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) kernel console output (not intermixed with test programs): T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.050605][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.081192][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.083229][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.087769][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.092119][ T6019] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.137250][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.140422][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.140791][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.146594][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.173349][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.176501][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.180073][ T5966] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.246281][ T6027] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 50.349942][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 50.353425][ T5966] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 50.355906][ T5966] usb 6-1: config 179 has no interface number 0 [ 50.357809][ T5966] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 50.361614][ T5966] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 50.365058][ T5966] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 50.368486][ T5966] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 50.372730][ T5966] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 50.376714][ T5966] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 50.379375][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.384891][ T6015] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.550465][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.602026][ T5966] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 50.719957][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 50.723503][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 50.727243][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 50.731063][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.738498][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 50.741341][ T29] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 50.743893][ T29] usb 5-1: Product: syz [ 50.745194][ T29] usb 5-1: Manufacturer: syz [ 50.746643][ T29] usb 5-1: SerialNumber: syz [ 50.754316][ T29] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input6 [ 50.802706][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.814262][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.817074][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.825607][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 50.825635][ T29] usb 6-1: USB disconnect, device number 2 [ 50.830152][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 50.954476][ T5966] usb 5-1: USB disconnect, device number 2 [ 50.963635][ T5966] appletouch 5-1:1.0: input: appletouch disconnected [ 50.970322][ T5939] Bluetooth: hci0: command tx timeout [ 50.970394][ T5930] Bluetooth: hci1: command tx timeout [ 51.050115][ T5930] Bluetooth: hci3: command tx timeout [ 51.060196][ T5930] Bluetooth: hci2: command tx timeout [ 51.235132][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.316294][ T6050] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 51.321807][ T6050] ceph: Path missing in source [ 51.695146][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 51.695157][ T40] audit: type=1400 audit(1763781872.523:177): avc: denied { write } for pid=6069 comm="syz.1.17" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.697899][ T6076] usb usb7: usbfs: process 6076 (syz.1.17) did not claim interface 0 before use [ 52.110397][ T6072] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 52.132611][ T6078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.150008][ T40] audit: type=1326 audit(1763781872.983:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.0.19" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df7f8f749 code=0x0 [ 52.319785][ T40] audit: type=1400 audit(1763781873.143:179): avc: denied { create } for pid=6082 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.327000][ T40] audit: type=1400 audit(1763781873.153:180): avc: denied { bind } for pid=6082 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.334750][ T40] audit: type=1400 audit(1763781873.153:181): avc: denied { write } for pid=6082 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.370684][ T40] audit: type=1400 audit(1763781873.203:182): avc: denied { read } for pid=6084 comm="syz.2.21" path="socket:[8136]" dev="sockfs" ino=8136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.422652][ T40] audit: type=1400 audit(1763781873.253:183): avc: denied { bind } for pid=6084 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.429979][ T40] audit: type=1400 audit(1763781873.253:184): avc: denied { create } for pid=6084 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.437296][ T40] audit: type=1400 audit(1763781873.253:185): avc: denied { connect } for pid=6084 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.472574][ T40] audit: type=1400 audit(1763781873.303:186): avc: denied { create } for pid=6087 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.600305][ T6090] tmpfs: Bad value for 'mpol' [ 53.039920][ T5966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.049955][ T5930] Bluetooth: hci0: command tx timeout [ 53.061724][ T5930] Bluetooth: hci1: command tx timeout [ 53.079499][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.31'. [ 53.130500][ T5939] Bluetooth: hci3: command tx timeout [ 53.132370][ T5930] Bluetooth: hci2: command tx timeout [ 53.159321][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.162786][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.166353][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.168994][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.201584][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 53.212029][ T5966] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 53.216790][ T5966] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 53.218229][ T6127] syzkaller0: entered promiscuous mode [ 53.221854][ T5966] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.223524][ T6127] syzkaller0: entered allmulticast mode [ 53.233301][ T5966] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 53.236369][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 53.239402][ T5966] usb 6-1: Product: syz [ 53.241197][ T5966] usb 6-1: Manufacturer: syz [ 53.242804][ T5966] usb 6-1: SerialNumber: syz [ 53.251477][ T5966] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input7 [ 53.456154][ T4185] usb 6-1: USB disconnect, device number 3 [ 53.475402][ T4185] appletouch 6-1:1.0: input: appletouch disconnected [ 53.975443][ T6153] gfs2: gfs2 mount does not exist [ 53.975626][ T6154] gfs2: gfs2 mount does not exist [ 54.025778][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 54.091443][ T6159] mmap: syz.1.42 (6159) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.106942][ T6163] process 'syz.0.44' launched './file0' with NULL argv: empty string added [ 54.124567][ T6163] 9pnet_virtio: no channels available for device syz [ 54.279396][ T6166] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 54.284790][ T6166] random: crng reseeded on system resumption [ 54.299950][ T6039] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.361915][ T6166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6166 comm=syz.1.46 [ 54.459929][ T6039] usb 8-1: Using ep0 maxpacket: 8 [ 54.463310][ T6039] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.466515][ T6039] usb 8-1: config 179 has no interface number 0 [ 54.469292][ T6039] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 54.473958][ T6039] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 54.478355][ T6039] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.482782][ T6039] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 54.487255][ T6039] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 54.493118][ T6039] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 54.496018][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.502284][ T6161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.614497][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.51'. [ 54.698199][ T6192] Zero length message leads to an empty skb [ 54.721835][ T6039] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input8 [ 54.746399][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.877799][ T6206] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.59'. [ 54.920974][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 54.927250][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 54.934126][ T5966] usb 8-1: USB disconnect, device number 2 [ 54.934168][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 54.938803][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 55.001827][ T6221] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 55.004232][ T6221] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 55.006849][ T6221] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 55.022595][ T6224] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 55.127317][ T6231] ipt_ECN: cannot use operation on non-tcp rule [ 55.130624][ T5930] Bluetooth: hci0: command tx timeout [ 55.131276][ T5939] Bluetooth: hci1: command tx timeout [ 55.165029][ T6238] __nla_validate_parse: 1 callbacks suppressed [ 55.165039][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.165042][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.165068][ T6234] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 55.167054][ T6238] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 55.167064][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.169101][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 55.170885][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.192211][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.193210][ T1151] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 55.195377][ T6238] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 55.198835][ T1151] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.201690][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.205691][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.208390][ T1151] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.210675][ T5939] Bluetooth: hci2: command tx timeout [ 55.210698][ T5939] Bluetooth: hci3: command tx timeout [ 55.211795][ T6234] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 55.217067][ T1151] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.219358][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 55.460068][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.463470][ T6256] netlink: 'syz.3.74': attribute type 3 has an invalid length. [ 55.467130][ T6256] netlink: 'syz.3.74': attribute type 3 has an invalid length. [ 55.617267][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.623458][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 55.627172][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.634214][ T10] usb 6-1: config 0 descriptor?? [ 55.673867][ T6271] SELinux: failed to load policy [ 55.838221][ T6240] CIFS: iocharset name too long [ 55.843055][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 55.845490][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 55.861010][ T10] usb 6-1: USB disconnect, device number 4 [ 55.912349][ T6284] SELinux: policydb string length 14080 does not match expected length 8 [ 55.914896][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.915160][ T6284] SELinux: failed to load policy [ 56.290826][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.364498][ T6296] ./bus: Can't lookup blockdev [ 56.452164][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 56.455888][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.461081][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 56.464838][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.475160][ T10] usb 6-1: config 0 descriptor?? [ 56.480007][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 56.493954][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 56.621052][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 56.635258][ T6313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.646107][ T6313] bridge1: entered promiscuous mode [ 56.647818][ T6313] bridge1: entered allmulticast mode [ 56.659633][ T5966] IPVS: starting estimator thread 0... [ 56.659717][ T6313] IPVS: ip_vs_edit_dest(): server weight less than zero [ 56.728660][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.750217][ T6316] IPVS: using max 45 ests per chain, 108000 per kthread [ 56.880559][ T6333] SELinux: failed to load policy [ 56.940271][ T5983] usb 6-1: USB disconnect, device number 5 [ 56.946741][ T5983] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 57.134802][ T6336] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.137657][ T6336] overlayfs: missing 'lowerdir' [ 57.220303][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 57.220314][ T40] audit: type=1400 audit(1763781878.043:285): avc: denied { unlink } for pid=6346 comm="syz.0.105" name="#1" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.228667][ T40] audit: type=1400 audit(1763781878.053:286): avc: denied { mount } for pid=6346 comm="syz.0.105" name="/" dev="overlay" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.484606][ T40] audit: type=1400 audit(1763781878.313:287): avc: denied { setopt } for pid=6364 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.532725][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.535220][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.539085][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.542663][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.729956][ T5966] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 57.802800][ T6376] SELinux: failed to load policy [ 57.911440][ T5966] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.914412][ T5966] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.917827][ T5966] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.920930][ T5966] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 57.924382][ T5966] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 57.930588][ T5966] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.934812][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.937714][ T5966] usb 6-1: Product: syz [ 57.939135][ T5966] usb 6-1: Manufacturer: syz [ 57.944743][ T5966] cdc_wdm 6-1:1.0: skipping garbage [ 57.946677][ T5966] cdc_wdm 6-1:1.0: skipping garbage [ 57.954446][ T5966] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 57.956425][ T5966] cdc_wdm 6-1:1.0: Unknown control protocol [ 57.995429][ T6380] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 57.998440][ T6380] NCSI netlink: No device for ifindex 0 [ 58.147477][ T40] audit: type=1400 audit(1763781878.973:288): avc: denied { read write } for pid=6364 comm="syz.1.110" name="cdc-wdm0" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 58.161307][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.164247][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.167046][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.169839][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.172719][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.175522][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.178310][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.178971][ T40] audit: type=1400 audit(1763781878.973:289): avc: denied { open } for pid=6364 comm="syz.1.110" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 58.181075][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.181437][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.196515][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.200513][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.203339][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.206183][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.208874][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.212041][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.214814][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.217596][ T5966] usb 6-1: USB disconnect, device number 6 [ 58.220082][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 58.220099][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 58.220112][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 58.237034][ T40] audit: type=1400 audit(1763781879.063:290): avc: denied { create } for pid=6393 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.246274][ T40] audit: type=1400 audit(1763781879.073:291): avc: denied { setopt } for pid=6393 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.262952][ T40] audit: type=1400 audit(1763781879.093:292): avc: denied { ioctl } for pid=6393 comm="syz.2.120" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.272159][ T40] audit: type=1400 audit(1763781879.093:293): avc: denied { bind } for pid=6393 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.278362][ T40] audit: type=1400 audit(1763781879.093:294): avc: denied { map } for pid=6393 comm="syz.2.120" path="socket:[13324]" dev="sockfs" ino=13324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.509447][ T6409] syz.2.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.522550][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.524942][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.527200][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.529415][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.532274][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.535469][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.537924][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.540948][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.543278][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.545591][ T5999] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 58.555483][ T5999] hid-generic 000C:0007:000C.0002: hidraw1: HID v14.24 Device [syz1] on syz0 [ 58.608562][ T6416] fido_id[6416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.700045][ T5966] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 58.805867][ T6432] geneve2: entered promiscuous mode [ 58.807579][ T6432] geneve2: entered allmulticast mode [ 58.809521][ T46] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.812480][ T46] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.815346][ T46] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.818132][ T46] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.840286][ T5966] usb 6-1: device descriptor read/64, error -71 [ 59.052634][ T6451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.056527][ T6451] block device autoloading is deprecated and will be removed. [ 59.079937][ T5966] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 59.182832][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.220001][ T5966] usb 6-1: device descriptor read/64, error -71 [ 59.329951][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 59.330798][ T5966] usb usb6-port1: attempt power cycle [ 59.337455][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 59.342541][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 59.347542][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.363648][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 59.367277][ T10] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 59.370327][ T10] usb 8-1: Product: syz [ 59.371739][ T10] usb 8-1: Manufacturer: syz [ 59.373839][ T10] usb 8-1: SerialNumber: syz [ 59.385332][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input9 [ 59.577014][ T6483] random: crng reseeded on system resumption [ 59.581098][ T10] usb 8-1: USB disconnect, device number 3 [ 59.583291][ C0] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 59.595516][ T10] appletouch 8-1:1.0: input: appletouch disconnected [ 59.672306][ T5966] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 59.691133][ T5966] usb 6-1: device descriptor read/8, error -71 [ 59.715026][ T6493] nfs4: Bad value for 'source' [ 59.717243][ T6493] bridge_slave_1: left allmulticast mode [ 59.719561][ T6493] bridge_slave_1: left promiscuous mode [ 59.721965][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.729429][ T6493] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 59.930518][ T5966] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 59.951244][ T5966] usb 6-1: device descriptor read/8, error -71 [ 60.061635][ T5966] usb usb6-port1: unable to enumerate USB device [ 60.313258][ T6511] __nla_validate_parse: 10 callbacks suppressed [ 60.313271][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'. [ 60.418483][ T6522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'. [ 60.493592][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.165'. [ 60.986415][ T6550] xt_nat: multiple ranges no longer supported [ 61.010572][ T6039] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.180039][ T6039] usb 7-1: Using ep0 maxpacket: 32 [ 61.194119][ T6039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 61.196669][ T6039] usb 7-1: no configurations [ 61.198218][ T6039] usb 7-1: can't read configurations, error -22 [ 61.484763][ T6571] overlayfs: failed to resolve './file1': -2 [ 61.881442][ T5930] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 61.978135][ T6598] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 61.978609][ T6599] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 62.608044][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 62.608059][ T40] audit: type=1400 audit(1763781883.433:335): avc: denied { search } for pid=6602 comm="syz.2.189" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.617129][ T40] audit: type=1400 audit(1763781883.433:336): avc: denied { search } for pid=6602 comm="syz.2.189" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.624134][ T40] audit: type=1400 audit(1763781883.433:337): avc: denied { setattr } for pid=6602 comm="syz.2.189" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.671712][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 62.756584][ T40] audit: type=1400 audit(1763781883.583:338): avc: denied { wake_alarm } for pid=6614 comm="syz.2.194" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.792868][ T40] audit: type=1400 audit(1763781883.623:339): avc: denied { name_bind } for pid=6617 comm="syz.2.195" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.832786][ T6621] raw_sendmsg: syz.2.196 forgot to set AF_INET. Fix it! [ 62.895208][ T40] audit: type=1400 audit(1763781883.723:340): avc: denied { setopt } for pid=6622 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.896138][ T6623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.197'. [ 62.905162][ T6623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.197'. [ 62.914401][ T40] audit: type=1400 audit(1763781883.743:341): avc: denied { create } for pid=6622 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.922454][ T40] audit: type=1400 audit(1763781883.743:342): avc: denied { setopt } for pid=6622 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.942048][ T40] audit: type=1400 audit(1763781883.773:343): avc: denied { accept } for pid=6622 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 62.977813][ T40] audit: type=1400 audit(1763781883.803:344): avc: denied { mount } for pid=6625 comm="syz.2.198" name="/" dev="rpc_pipefs" ino=13855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.086453][ T6630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.090427][ T6630] nbd: must specify at least one socket [ 63.134957][ T6630] veth1_macvtap: left promiscuous mode [ 63.136980][ T6630] macsec0: entered promiscuous mode [ 63.361998][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 63.415732][ T6655] netlink: 75 bytes leftover after parsing attributes in process `syz.2.208'. [ 63.541413][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 63.619769][ T6661] syzkaller0: entered promiscuous mode [ 63.622488][ T6661] syzkaller0: entered allmulticast mode [ 63.639168][ T6661] tipc: Started in network mode [ 63.641450][ T6661] tipc: Node identity 3aab6131d00f, cluster identity 4711 [ 63.645178][ T6661] tipc: Enabled bearer , priority 0 [ 63.652512][ T6660] tipc: Resetting bearer [ 63.665875][ T6660] tipc: Disabling bearer [ 64.099801][ T6678] validate_nla: 2 callbacks suppressed [ 64.099811][ T6678] netlink: 'syz.1.216': attribute type 16 has an invalid length. [ 64.100284][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 64.100365][ T5930] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.338803][ T5930] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 64.652286][ T6705] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 64.802917][ T6716] CIFS: iocharset name too long [ 64.840369][ T6039] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.873396][ T6720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.878270][ T6720] block device autoloading is deprecated and will be removed. [ 64.931720][ T5930] Bluetooth: hci0: Unable to find connection for big 0x66 [ 65.023100][ T6039] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 65.026486][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.039979][ T6039] usb 7-1: Product: syz [ 65.041534][ T6039] usb 7-1: Manufacturer: syz [ 65.043141][ T6039] usb 7-1: SerialNumber: syz [ 65.055641][ T6039] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 65.084182][ T6737] netlink: 'syz.1.234': attribute type 11 has an invalid length. [ 65.091154][ T29] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 65.266117][ T6740] netlink: 'syz.0.235': attribute type 11 has an invalid length. [ 65.387995][ T6747] nfs: Unknown parameter 'GPL' [ 65.494535][ T6761] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 65.508362][ T6761] bond1: entered promiscuous mode [ 65.510603][ T6761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.521950][ T6761] __nla_validate_parse: 5 callbacks suppressed [ 65.521959][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 65.526843][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 65.573853][ T6703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6703 comm=syz.2.224 [ 65.591883][ T6039] usb 7-1: USB disconnect, device number 4 [ 65.597184][ T6758] can0: slcan on ttyS3. [ 65.597186][ T6765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.240'. [ 65.612056][ T6765] bond1: (slave bridge2): making interface the new active one [ 65.615079][ T6765] bridge2: entered promiscuous mode [ 65.617498][ T6765] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 65.656593][ T6769] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 65.676598][ T6771] overlayfs: failed to resolve './bus': -2 [ 65.681159][ T6773] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 65.871344][ T6757] can0 (unregistered): slcan off ttyS3. [ 65.872757][ T6790] usb usb8: usbfs: process 6790 (syz.3.248) did not claim interface 0 before use [ 65.877071][ T6791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=6791 comm=syz.3.248 [ 65.931910][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 66.175848][ T6820] team_slave_0: entered promiscuous mode [ 66.178152][ T6820] team_slave_1: entered promiscuous mode [ 66.183498][ T6820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.191781][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 66.420698][ T29] usb 7-1: Service connection timeout for: 256 [ 66.422639][ T29] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 66.426315][ T29] ath9k_htc: Failed to initialize the device [ 66.439995][ T6039] usb 7-1: ath9k_htc: USB layer deinitialized [ 66.472264][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.265'. [ 66.571894][ T6863] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 66.576012][ T6863] netlink: 228 bytes leftover after parsing attributes in process `syz.2.269'. [ 66.638956][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'. [ 66.667387][ T6868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.272'. [ 66.705663][ T6868] bond2: entered allmulticast mode [ 66.708070][ T6868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.714437][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 66.718923][ T6873] netlink: 'syz.2.273': attribute type 30 has an invalid length. [ 66.721611][ T6871] trusted_key: syz.1.271 sent an empty control message without MSG_MORE. [ 66.731112][ T1158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.733881][ T1158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.741672][ T1158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.744455][ T1158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.857041][ T6885] binder: BINDER_SET_CONTEXT_MGR already set [ 66.860452][ T6885] binder: 6884:6885 ioctl 4018620d 200000000100 returned -16 [ 67.012165][ T6896] xt_ecn: cannot match TCP bits for non-tcp packets [ 67.089345][ T6904] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 67.092448][ T6904] team0: Device ipvlan2 is already an upper device of the team interface [ 67.224291][ T6921] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 67.258219][ T6922] netlink: 'syz.0.286': attribute type 30 has an invalid length. [ 67.381060][ T5930] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 67.384831][ T5930] Bluetooth: hci2: Injecting HCI hardware error event [ 67.387550][ T5930] Bluetooth: hci2: hardware error 0x00 [ 67.610909][ T40] kauditd_printk_skb: 1536 callbacks suppressed [ 67.610920][ T40] audit: type=1400 audit(1763781888.443:1881): avc: denied { read write } for pid=6935 comm="syz.1.291" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.611117][ T40] audit: type=1400 audit(1763781888.443:1882): avc: denied { read write open } for pid=6935 comm="syz.1.291" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.611267][ T40] audit: type=1400 audit(1763781888.443:1883): avc: denied { ioctl } for pid=6935 comm="syz.1.291" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.629674][ T40] audit: type=1400 audit(1763781888.453:1884): avc: denied { read write } for pid=6935 comm="syz.1.291" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.649072][ T40] audit: type=1400 audit(1763781888.453:1885): avc: denied { open } for pid=6935 comm="syz.1.291" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.649107][ T40] audit: type=1400 audit(1763781888.453:1886): avc: denied { ioctl } for pid=6935 comm="syz.1.291" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.706466][ T40] audit: type=1400 audit(1763781888.533:1887): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.706505][ T40] audit: type=1400 audit(1763781888.533:1888): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.706536][ T40] audit: type=1400 audit(1763781888.533:1889): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.747132][ T40] audit: type=1400 audit(1763781888.573:1890): avc: denied { read write } for pid=6948 comm="syz.2.294" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.009888][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.170149][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 68.172606][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 68.172623][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 68.172635][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12576, setting to 1024 [ 68.172648][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 68.172658][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.172677][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.172688][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.313930][ T6967] Bluetooth: MGMT ver 1.23 [ 68.381945][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 68.383703][ T29] usbtmc 7-1:16.0: can't read capabilities [ 68.501898][ T6985] befs: (nullb0): No write support. Marking filesystem read-only [ 68.505703][ T6985] befs: (nullb0): invalid magic header [ 68.583749][ T29] usb 7-1: USB disconnect, device number 5 [ 68.924667][ T7015] fuse: Unknown parameter 'f' [ 68.971189][ T7019] netlink: 'syz.0.316': attribute type 30 has an invalid length. [ 69.128673][ T7030] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 69.131872][ T7030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.449939][ T5930] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 69.668826][ T7045] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 69.760511][ T7050] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 69.809784][ T7052] ======================================================= [ 69.809784][ T7052] WARNING: The mand mount option has been deprecated and [ 69.809784][ T7052] and is ignored by this kernel. Remove the mand [ 69.809784][ T7052] option from the mount to silence this warning. [ 69.809784][ T7052] ======================================================= [ 69.824183][ T7052] hugetlbfs: Bad value for 'uid' [ 69.826380][ T7052] hugetlbfs: Bad value for 'uid' [ 70.054042][ T7072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7072 comm=syz.3.334 [ 70.059274][ T7073] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.177953][ T7083] bridge1: entered promiscuous mode [ 70.179914][ T7083] bridge1: entered allmulticast mode [ 70.267962][ T7089] sch_fq: defrate 4294967295 ignored. [ 70.326196][ T7093] FAULT_INJECTION: forcing a failure. [ 70.326196][ T7093] name failslab, interval 1, probability 0, space 0, times 1 [ 70.331638][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(full) [ 70.331652][ T7093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.331658][ T7093] Call Trace: [ 70.331662][ T7093] [ 70.331666][ T7093] dump_stack_lvl+0x16c/0x1f0 [ 70.331680][ T7093] should_fail_ex+0x512/0x640 [ 70.331702][ T7093] ? fs_reclaim_acquire+0xae/0x150 [ 70.331717][ T7093] should_failslab+0xc2/0x120 [ 70.331729][ T7093] __kmalloc_noprof+0xdd/0x880 [ 70.331744][ T7093] ? tomoyo_encode2+0x100/0x3e0 [ 70.331759][ T7093] ? tomoyo_encode2+0x100/0x3e0 [ 70.331770][ T7093] tomoyo_encode2+0x100/0x3e0 [ 70.331783][ T7093] tomoyo_encode+0x29/0x50 [ 70.331794][ T7093] tomoyo_realpath_from_path+0x18f/0x6e0 [ 70.331808][ T7093] ? tomoyo_profile+0x47/0x60 [ 70.331823][ T7093] tomoyo_path_number_perm+0x245/0x580 [ 70.331832][ T7093] ? tomoyo_path_number_perm+0x237/0x580 [ 70.331843][ T7093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.331854][ T7093] ? find_held_lock+0x2b/0x80 [ 70.331879][ T7093] ? find_held_lock+0x2b/0x80 [ 70.331891][ T7093] ? hook_file_ioctl_common+0x145/0x410 [ 70.331908][ T7093] ? __fget_files+0x20e/0x3c0 [ 70.331921][ T7093] security_file_ioctl+0x9b/0x240 [ 70.331935][ T7093] __x64_sys_ioctl+0xb7/0x210 [ 70.331950][ T7093] do_syscall_64+0xcd/0xfa0 [ 70.331961][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.331972][ T7093] RIP: 0033:0x7fb206d8f749 [ 70.331980][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.331989][ T7093] RSP: 002b:00007fb204ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.331999][ T7093] RAX: ffffffffffffffda RBX: 00007fb206fe5fa0 RCX: 00007fb206d8f749 [ 70.332005][ T7093] RDX: 00002000000002c0 RSI: 000000004040ae9e RDI: 0000000000000005 [ 70.332011][ T7093] RBP: 00007fb204ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 70.332016][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.332022][ T7093] R13: 00007fb206fe6038 R14: 00007fb206fe5fa0 R15: 00007ffc4a5b7d18 [ 70.332035][ T7093] [ 70.332044][ T7093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.490019][ T7102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.724193][ T7122] __nla_validate_parse: 9 callbacks suppressed [ 70.724207][ T7122] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.355'. [ 70.739317][ T7124] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.355'. [ 70.773222][ T7126] FAULT_INJECTION: forcing a failure. [ 70.773222][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.778557][ T7126] CPU: 2 UID: 0 PID: 7126 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 70.778576][ T7126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.778583][ T7126] Call Trace: [ 70.778588][ T7126] [ 70.778593][ T7126] dump_stack_lvl+0x16c/0x1f0 [ 70.778612][ T7126] should_fail_ex+0x512/0x640 [ 70.778630][ T7126] _copy_from_user+0x2e/0xd0 [ 70.778648][ T7126] kvm_arch_vcpu_ioctl+0x10fa/0x5510 [ 70.778666][ T7126] ? stack_trace_save+0x8e/0xc0 [ 70.778685][ T7126] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 70.778698][ T7126] ? stack_depot_save_flags+0x29/0x9c0 [ 70.778714][ T7126] ? __lock_acquire+0xb8a/0x1c90 [ 70.778728][ T7126] ? kasan_save_stack+0x42/0x60 [ 70.778740][ T7126] ? kasan_save_stack+0x33/0x60 [ 70.778751][ T7126] ? kasan_save_track+0x14/0x30 [ 70.778762][ T7126] ? __kasan_save_free_info+0x3b/0x60 [ 70.778779][ T7126] ? __kasan_slab_free+0x5f/0x80 [ 70.778791][ T7126] ? kfree+0x2b8/0x6d0 [ 70.778806][ T7126] ? tomoyo_path_number_perm+0x470/0x580 [ 70.778818][ T7126] ? security_file_ioctl+0x9b/0x240 [ 70.778832][ T7126] ? do_syscall_64+0xcd/0xfa0 [ 70.778846][ T7126] ? __lock_acquire+0xb8a/0x1c90 [ 70.778863][ T7126] ? __mutex_trylock_common+0xe9/0x250 [ 70.778876][ T7126] ? __pfx___mutex_trylock_common+0x10/0x10 [ 70.778889][ T7126] ? __pfx___might_resched+0x10/0x10 [ 70.778906][ T7126] ? rcu_is_watching+0x12/0xc0 [ 70.778922][ T7126] ? trace_contention_end+0xdd/0x130 [ 70.778934][ T7126] ? __mutex_lock+0x1c5/0x1060 [ 70.778949][ T7126] ? kasan_quarantine_put+0x10a/0x240 [ 70.778963][ T7126] ? __pfx___mutex_lock+0x10/0x10 [ 70.778983][ T7126] ? tomoyo_path_number_perm+0x18d/0x580 [ 70.778998][ T7126] ? kvm_vcpu_ioctl+0x1235/0x1690 [ 70.779014][ T7126] kvm_vcpu_ioctl+0x1235/0x1690 [ 70.779033][ T7126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.779050][ T7126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.779067][ T7126] ? do_vfs_ioctl+0x128/0x14f0 [ 70.779085][ T7126] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.779102][ T7126] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.779124][ T7126] ? hook_file_ioctl_common+0x145/0x410 [ 70.779147][ T7126] ? selinux_file_ioctl+0x180/0x270 [ 70.779160][ T7126] ? selinux_file_ioctl+0xb4/0x270 [ 70.779175][ T7126] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.779192][ T7126] __x64_sys_ioctl+0x18e/0x210 [ 70.779211][ T7126] do_syscall_64+0xcd/0xfa0 [ 70.779224][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.779236][ T7126] RIP: 0033:0x7f73fdf8f749 [ 70.779247][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.779259][ T7126] RSP: 002b:00007f73fedff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.779273][ T7126] RAX: ffffffffffffffda RBX: 00007f73fe1e5fa0 RCX: 00007f73fdf8f749 [ 70.779281][ T7126] RDX: 00002000000002c0 RSI: 000000004040ae9e RDI: 0000000000000005 [ 70.779289][ T7126] RBP: 00007f73fedff090 R08: 0000000000000000 R09: 0000000000000000 [ 70.779297][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.779304][ T7126] R13: 00007f73fe1e6038 R14: 00007f73fe1e5fa0 R15: 00007ffe0f85e8a8 [ 70.779323][ T7126] [ 70.805124][ T7128] tmpfs: Bad value for 'mpol' [ 70.858830][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 71.259971][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.295968][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298384][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.316401][ T7156] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 71.322730][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.326698][ T7156] bridge_slave_1: left allmulticast mode [ 71.329157][ T7156] bridge_slave_1: left promiscuous mode [ 71.333535][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.340796][ T7156] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 72.104248][ T7199] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.107666][ T7199] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 72.111175][ T7199] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.114665][ T7199] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 72.168577][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 72.256245][ T7208] 9pnet_virtio: no channels available for device syz [ 72.382281][ T7212] sctp: [Deprecated]: syz.0.388 (pid 7212) Use of int in maxseg socket option. [ 72.382281][ T7212] Use struct sctp_assoc_value instead [ 72.637409][ T40] kauditd_printk_skb: 1173 callbacks suppressed [ 72.637420][ T40] audit: type=1400 audit(1763781893.463:3064): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.647252][ T40] audit: type=1400 audit(1763781893.463:3065): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.654652][ T40] audit: type=1400 audit(1763781893.463:3066): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.663221][ T40] audit: type=1400 audit(1763781893.483:3067): avc: denied { map_create } for pid=7222 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.669053][ T40] audit: type=1400 audit(1763781893.483:3068): avc: denied { bpf } for pid=7222 comm="syz.2.390" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.675900][ T40] audit: type=1400 audit(1763781893.483:3069): avc: denied { read } for pid=7222 comm="syz.2.390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.683238][ T40] audit: type=1400 audit(1763781893.483:3070): avc: denied { open } for pid=7222 comm="syz.2.390" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.690872][ T40] audit: type=1400 audit(1763781893.493:3071): avc: denied { ioctl } for pid=7222 comm="syz.2.390" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.699385][ T40] audit: type=1400 audit(1763781893.523:3072): avc: denied { read } for pid=7222 comm="syz.2.390" dev="nsfs" ino=4026533308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.706506][ T40] audit: type=1400 audit(1763781893.523:3073): avc: denied { open } for pid=7222 comm="syz.2.390" path="net:[4026533308]" dev="nsfs" ino=4026533308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.032632][ T7237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.161716][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 73.220981][ T7255] overlayfs: failed to resolve './file0': -2 [ 73.262807][ T7257] comedi comedi3: comedi_config --init_data is deprecated [ 73.272308][ T7260] misc userio: No port type given on /dev/userio [ 73.339061][ T7266] overlayfs: conflicting lowerdir path [ 73.380575][ T7271] netlink: 112 bytes leftover after parsing attributes in process `syz.3.403'. [ 73.475608][ T7274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.554291][ T7298] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 73.564630][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 73.567475][ T7289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.409'. [ 73.569726][ T7298] bond2: (slave bridge2): making interface the new active one [ 73.570226][ T7298] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 73.690825][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 73.901239][ T7315] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.416'. [ 73.908596][ T7315] netlink: 'syz.3.416': attribute type 23 has an invalid length. [ 73.913136][ T7315] hugetlbfs: Unknown parameter 'xS2' [ 73.964243][ T7317] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.969014][ T7317] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.009217][ T5930] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 74.012784][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 74.012801][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.012808][ T5930] Workqueue: hci0 hci_rx_work [ 74.012844][ T5930] Call Trace: [ 74.012848][ T5930] [ 74.012853][ T5930] dump_stack_lvl+0x16c/0x1f0 [ 74.012866][ T5930] sysfs_warn_dup+0x7f/0xa0 [ 74.012882][ T5930] sysfs_create_dir_ns+0x24b/0x2b0 [ 74.012895][ T5930] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 74.012909][ T5930] ? find_held_lock+0x2b/0x80 [ 74.012926][ T5930] ? do_raw_spin_unlock+0x172/0x230 [ 74.012939][ T5930] kobject_add_internal+0x2c4/0x9b0 [ 74.012955][ T5930] kobject_add+0x16e/0x240 [ 74.012967][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 74.012980][ T5930] ? do_raw_spin_unlock+0x172/0x230 [ 74.012992][ T5930] ? kobject_put+0xab/0x5a0 [ 74.013006][ T5930] device_add+0x288/0x1aa0 [ 74.013026][ T5930] ? __pfx_dev_set_name+0x10/0x10 [ 74.013041][ T5930] ? __pfx_device_add+0x10/0x10 [ 74.013054][ T5930] ? mgmt_send_event_skb+0x2fb/0x460 [ 74.013074][ T5930] hci_conn_add_sysfs+0x17e/0x230 [ 74.013085][ T5930] le_conn_complete_evt+0x1260/0x2150 [ 74.013105][ T5930] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 74.013120][ T5930] ? hci_event_packet+0x459/0x11c0 [ 74.013145][ T5930] hci_le_conn_complete_evt+0x23c/0x370 [ 74.013190][ T5930] hci_le_meta_evt+0x357/0x5e0 [ 74.013206][ T5930] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 74.013223][ T5930] hci_event_packet+0x685/0x11c0 [ 74.013238][ T5930] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 74.013247][ T5930] ? __pfx_hci_event_packet+0x10/0x10 [ 74.013263][ T5930] ? kcov_remote_start+0x3c9/0x6d0 [ 74.013276][ T5930] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.013289][ T5930] hci_rx_work+0x2c5/0x16b0 [ 74.013299][ T5930] ? rcu_is_watching+0x12/0xc0 [ 74.013314][ T5930] process_one_work+0x9cf/0x1b70 [ 74.013331][ T5930] ? __pfx_process_one_work+0x10/0x10 [ 74.013346][ T5930] ? assign_work+0x1a0/0x250 [ 74.013357][ T5930] worker_thread+0x6c8/0xf10 [ 74.013374][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 74.013384][ T5930] kthread+0x3c5/0x780 [ 74.013397][ T5930] ? __pfx_kthread+0x10/0x10 [ 74.013407][ T5930] ? rcu_is_watching+0x12/0xc0 [ 74.013420][ T5930] ? __pfx_kthread+0x10/0x10 [ 74.013430][ T5930] ret_from_fork+0x675/0x7d0 [ 74.013440][ T5930] ? __pfx_kthread+0x10/0x10 [ 74.013449][ T5930] ret_from_fork_asm+0x1a/0x30 [ 74.013471][ T5930] [ 74.013486][ T5930] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.114516][ T5930] Bluetooth: hci0: failed to register connection device [ 74.121272][ T7329] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 74.167966][ T7334] xt_ecn: cannot match TCP bits for non-tcp packets [ 74.422452][ T7354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7354 comm=syz.0.428 [ 74.426573][ T7356] hsr_slave_0: left promiscuous mode [ 74.429365][ T7356] hsr_slave_1: left promiscuous mode [ 74.589932][ T5966] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.743489][ T5966] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.746359][ T5966] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 74.749748][ T5966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.754186][ T5966] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 74.757655][ T5966] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.764883][ T5966] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.767657][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.771008][ T5966] usb 7-1: Product: syz [ 74.772401][ T5966] usb 7-1: Manufacturer: syz [ 74.780728][ T5966] cdc_wdm 7-1:1.0: skipping garbage [ 74.782807][ T5966] cdc_wdm 7-1:1.0: skipping garbage [ 74.785776][ T5966] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.787744][ T5966] cdc_wdm 7-1:1.0: Unknown control protocol [ 75.014278][ T7395] syzkaller0: entered promiscuous mode [ 75.016081][ T7395] syzkaller0: entered allmulticast mode [ 75.029709][ T7395] tipc: Started in network mode [ 75.031681][ T7395] tipc: Node identity 5276f5d25904, cluster identity 4711 [ 75.035286][ T7395] tipc: Enabled bearer , priority 0 [ 75.099601][ T7394] tipc: Resetting bearer [ 75.107544][ T7394] tipc: Disabling bearer [ 75.219942][ T840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.293493][ C3] cdc_wdm 7-1:1.0: Unexpected error -71 [ 75.294657][ T5999] usb 7-1: USB disconnect, device number 6 [ 75.296090][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 75.299484][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 75.301404][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 75.360026][ T840] usb 5-1: device descriptor read/64, error -71 [ 75.508599][ T7348] bond1: Removing last ns target with arp_interval on [ 75.611792][ T840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.657460][ T7409] netlink: 'syz.3.445': attribute type 2 has an invalid length. [ 75.661663][ T7409] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 75.693104][ T7411] 9pnet: Unknown protocol version 9p20\++} [ 75.749905][ T840] usb 5-1: device descriptor read/64, error -71 [ 75.860349][ T840] usb usb5-port1: attempt power cycle [ 75.872153][ T5930] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 76.120177][ T5999] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.124317][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 76.128688][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 76.131951][ T7428] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 76.134690][ T7428] UDF-fs: Scanning with blocksize 512 failed [ 76.138074][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 76.141205][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 76.144302][ T7428] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 76.146727][ T7428] UDF-fs: Scanning with blocksize 1024 failed [ 76.149007][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 76.153136][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 76.157296][ T7428] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 76.163454][ T7428] UDF-fs: Scanning with blocksize 2048 failed [ 76.167093][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 76.171662][ T7428] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 76.175731][ T7428] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 76.179233][ T7428] UDF-fs: Scanning with blocksize 4096 failed [ 76.182987][ T7428] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 76.209973][ T840] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.232528][ T840] usb 5-1: device descriptor read/8, error -71 [ 76.233509][ T7431] netlink: 'syz.2.452': attribute type 9 has an invalid length. [ 76.237474][ T7431] __nla_validate_parse: 6 callbacks suppressed [ 76.237485][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 76.270811][ T5999] usb 8-1: Using ep0 maxpacket: 32 [ 76.275630][ T5999] usb 8-1: config 192 has an invalid interface number: 174 but max is 2 [ 76.278332][ T5999] usb 8-1: config 192 has an invalid interface number: 107 but max is 2 [ 76.283817][ T5999] usb 8-1: config 192 has an invalid interface number: 204 but max is 2 [ 76.286459][ T5999] usb 8-1: config 192 has an invalid interface number: 33 but max is 2 [ 76.289110][ T5999] usb 8-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 76.293779][ T5999] usb 8-1: config 192 has an invalid interface number: 38 but max is 2 [ 76.296442][ T5999] usb 8-1: config 192 has an invalid descriptor of length 1, skipping remainder of the config [ 76.299709][ T5999] usb 8-1: config 192 has 5 interfaces, different from the descriptor's value: 3 [ 76.303532][ T5999] usb 8-1: config 192 has no interface number 0 [ 76.305534][ T5999] usb 8-1: config 192 has no interface number 1 [ 76.307512][ T5999] usb 8-1: config 192 has no interface number 2 [ 76.309495][ T5999] usb 8-1: config 192 has no interface number 3 [ 76.313400][ T5999] usb 8-1: config 192 has no interface number 4 [ 76.315402][ T5999] usb 8-1: config 192 interface 174 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 76.319152][ T5999] usb 8-1: config 192 interface 174 altsetting 8 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 76.324382][ T5999] usb 8-1: config 192 interface 174 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 76.327822][ T5999] usb 8-1: config 192 interface 174 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 76.332192][ T5999] usb 8-1: config 192 interface 107 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 76.335310][ T5999] usb 8-1: config 192 interface 107 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 76.339084][ T7440] fuse: Bad value for 'fd' [ 76.339172][ T5999] usb 8-1: config 192 interface 107 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 76.344136][ T5999] usb 8-1: config 192 interface 107 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 76.347511][ T5999] usb 8-1: config 192 interface 107 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 76.351252][ T5999] usb 8-1: config 192 interface 204 altsetting 166 has a duplicate endpoint with address 0x1, skipping [ 76.354683][ T5999] usb 8-1: config 192 interface 204 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 76.358963][ T5999] usb 8-1: too many endpoints for config 192 interface 33 altsetting 183: 125, using maximum allowed: 30 [ 76.362532][ T5999] usb 8-1: config 192 interface 33 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 76.365884][ T5999] usb 8-1: config 192 interface 33 altsetting 183 has 2 endpoint descriptors, different from the interface descriptor's value: 125 [ 76.370093][ T5999] usb 8-1: too many endpoints for config 192 interface 38 altsetting 73: 219, using maximum allowed: 30 [ 76.373449][ T5999] usb 8-1: config 192 interface 38 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 76.377585][ T5999] usb 8-1: config 192 interface 174 has no altsetting 0 [ 76.379734][ T5999] usb 8-1: config 192 interface 204 has no altsetting 0 [ 76.381882][ T5999] usb 8-1: config 192 interface 33 has no altsetting 0 [ 76.383957][ T5999] usb 8-1: config 192 interface 38 has no altsetting 0 [ 76.393088][ T5999] usb 8-1: New USB device found, idVendor=093a, idProduct=2629, bcdDevice=9e.b0 [ 76.395887][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.398690][ T5999] usb 8-1: Product:   [ 76.400882][ T5999] usb 8-1: Manufacturer: 騎澂筷躯㌵⾮囝㍕쪴ڹ鮛鐉⏠⥷ㄜ㨸ᗆ缁ቘ妖鸁龍凒暽魗ἦʢ䤑禡 [ 76.404425][ T5999] usb 8-1: SerialNumber: ࠔ [ 76.470266][ T840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.501390][ T840] usb 5-1: device descriptor read/8, error -71 [ 76.610240][ T840] usb usb5-port1: unable to enumerate USB device [ 76.642925][ T5999] usb 8-1: USB disconnect, device number 4 [ 76.712564][ T7458] evm: overlay not supported [ 76.920576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.625935][ T7479] kvm: pic: non byte write [ 77.631815][ T7487] binder: 7486:7487 ioctl 400454ce 0 returned -22 [ 77.636037][ T7487] binder: 7486:7487 unknown command 0 [ 77.637843][ T7487] binder: 7486:7487 ioctl c0306201 200000000080 returned -22 [ 77.641407][ T40] kauditd_printk_skb: 1027 callbacks suppressed [ 77.641416][ T40] audit: type=1400 audit(1763781898.473:4101): avc: denied { ioctl } for pid=7486 comm="syz.3.469" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.661249][ T40] audit: type=1400 audit(1763781898.473:4102): avc: denied { map_create } for pid=7486 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.669017][ T40] audit: type=1400 audit(1763781898.483:4103): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.680093][ T40] audit: type=1400 audit(1763781898.483:4104): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.693844][ T40] audit: type=1400 audit(1763781898.483:4105): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.704160][ T40] audit: type=1400 audit(1763781898.513:4106): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.713098][ T40] audit: type=1400 audit(1763781898.523:4107): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.716999][ T7490] vlan2: entered allmulticast mode [ 77.721283][ T40] audit: type=1400 audit(1763781898.523:4108): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.722694][ T7490] bond0: entered allmulticast mode [ 77.722710][ T7490] bond_slave_0: entered allmulticast mode [ 77.722724][ T7490] bond_slave_1: entered allmulticast mode [ 77.733268][ T40] audit: type=1400 audit(1763781898.563:4109): avc: denied { module_request } for pid=7491 comm="syz.2.471" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.746260][ T40] audit: type=1400 audit(1763781898.563:4110): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.020337][ T7512] sp0: Synchronizing with TNC [ 78.133828][ T7520] UHID_CREATE from different security context by process 374 (syz.0.479), this is not allowed. [ 78.150147][ T7519] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.262118][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.482'. [ 78.270622][ T5966] IPVS: starting estimator thread 0... [ 78.389962][ T7531] IPVS: using max 45 ests per chain, 108000 per kthread [ 78.522711][ T7540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.544266][ T7550] Invalid logical block size (-3) [ 78.551797][ T7551] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 78.662162][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 78.666750][ T7555] bpf: Bad value for 'gid' [ 78.769410][ T7567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7567 comm=syz.0.497 [ 78.769960][ T5966] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.778791][ T7569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7569 comm=syz.0.497 [ 78.786894][ T7572] netlink: 6 bytes leftover after parsing attributes in process `syz.1.496'. [ 78.789791][ T7572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.962409][ T5966] usb 8-1: no configurations [ 78.963970][ T5966] usb 8-1: can't read configurations, error -22 [ 79.046970][ T7594] netlink: 'syz.2.503': attribute type 21 has an invalid length. [ 79.047823][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 79.050662][ T7594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.503'. [ 79.101210][ T5966] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.107980][ T7596] fuse: Unknown parameter '0x0000000000000007' [ 79.200305][ T7603] tmpfs: Bad value for 'mpol' [ 79.265444][ T7609] ip6tnl2: entered promiscuous mode [ 79.271696][ T5966] usb 8-1: no configurations [ 79.273736][ T5966] usb 8-1: can't read configurations, error -22 [ 79.276751][ T5966] usb usb8-port1: attempt power cycle [ 79.614226][ T5966] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.631646][ T5966] usb 8-1: no configurations [ 79.633286][ T5966] usb 8-1: can't read configurations, error -22 [ 79.735435][ T7617] program syz.1.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.759934][ T5966] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.782026][ T5966] usb 8-1: no configurations [ 79.784085][ T5966] usb 8-1: can't read configurations, error -22 [ 79.786479][ T5966] usb usb8-port1: unable to enumerate USB device [ 79.848546][ T7622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7622 comm=syz.1.512 [ 79.849775][ T7624] 9pnet_virtio: no channels available for device syz [ 79.906280][ T7628] qnx6: unable to set blocksize [ 79.927350][ T7628] netlink: 76 bytes leftover after parsing attributes in process `syz.1.514'. [ 79.930184][ T5930] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 79.934861][ T5930] Bluetooth: hci0: Injecting HCI hardware error event [ 79.938997][ T5939] Bluetooth: hci0: hardware error 0x00 [ 80.041522][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'. [ 80.646358][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.646411][ T7686] netlink: 348 bytes leftover after parsing attributes in process `syz.0.531'. [ 80.665751][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 80.782092][ T7691] capability: warning: `syz.1.533' uses deprecated v2 capabilities in a way that may be insecure [ 81.054944][ T7700] IPv4: Oversized IP packet from 172.20.20.24 [ 81.058894][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 81.167617][ T7705] geneve2: entered promiscuous mode [ 81.169362][ T7705] geneve2: entered allmulticast mode [ 81.457044][ T7709] hfsplus: unable to find HFS+ superblock [ 81.534321][ T1027] cfg80211: failed to load regulatory.db [ 81.647426][ T7694] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 81.699813][ T7718] __nla_validate_parse: 4 callbacks suppressed [ 81.702195][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 81.704989][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 81.753298][ T7724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7724 comm=syz.2.542 [ 81.771789][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 81.775441][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 82.009995][ T5939] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.065713][ T7751] program syz.0.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.260374][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.292525][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 82.431033][ T10] usb 7-1: no configurations [ 82.432794][ T10] usb 7-1: can't read configurations, error -22 [ 82.530006][ T61] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 82.560065][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 82.664561][ T40] kauditd_printk_skb: 1039 callbacks suppressed [ 82.664575][ T40] audit: type=1400 audit(1763781903.493:5150): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.682127][ T40] audit: type=1400 audit(1763781903.493:5151): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.694206][ T7764] random: crng reseeded on system resumption [ 82.695259][ T40] audit: type=1400 audit(1763781903.493:5152): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.708004][ T40] audit: type=1400 audit(1763781903.513:5153): avc: denied { read } for pid=7763 comm="syz.0.556" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.712264][ T10] usb 7-1: no configurations [ 82.712278][ T10] usb 7-1: can't read configurations, error -22 [ 82.712550][ T10] usb usb7-port1: attempt power cycle [ 82.717725][ T40] audit: type=1400 audit(1763781903.513:5154): avc: denied { open } for pid=7763 comm="syz.0.556" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.717749][ T40] audit: type=1400 audit(1763781903.523:5155): avc: denied { write } for pid=7763 comm="syz.0.556" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.717809][ T40] audit: type=1400 audit(1763781903.523:5156): avc: denied { write open } for pid=7763 comm="syz.0.556" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.717831][ T40] audit: type=1400 audit(1763781903.523:5157): avc: denied { ioctl } for pid=7755 comm="syz.3.553" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.717852][ T40] audit: type=1400 audit(1763781903.533:5158): avc: denied { ioctl } for pid=7755 comm="syz.3.553" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.717874][ T40] audit: type=1400 audit(1763781903.543:5159): avc: denied { ioctl } for pid=7741 comm="syz.2.549" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.722348][ T61] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.736209][ T61] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.753930][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 82.766000][ T61] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.798117][ T61] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.801618][ T61] usb 8-1: Product: syz [ 82.803415][ T61] usb 8-1: Manufacturer: syz [ 82.805385][ T61] usb 8-1: SerialNumber: syz [ 82.811563][ T61] usb 8-1: config 0 descriptor?? [ 82.819976][ T61] usb 8-1: selecting invalid altsetting 0 [ 82.890148][ T5939] Bluetooth: hci3: command 0x0401 tx timeout [ 83.021165][ T24] usb 8-1: USB disconnect, device number 9 [ 83.050282][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 83.072337][ T10] usb 7-1: no configurations [ 83.074172][ T10] usb 7-1: can't read configurations, error -22 [ 83.199904][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 83.221420][ T10] usb 7-1: no configurations [ 83.223392][ T10] usb 7-1: can't read configurations, error -22 [ 83.226429][ T10] usb usb7-port1: unable to enumerate USB device [ 83.339985][ T5983] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 83.501071][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 83.503648][ T5983] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.507706][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.511300][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.515857][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 83.519369][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 83.524375][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.529757][ T5983] usb 5-1: config 168 interface 0 has no altsetting 0 [ 83.535078][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 83.537583][ T5983] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.542128][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.545671][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.549651][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 83.553830][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 83.557445][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.562596][ T5983] usb 5-1: config 168 interface 0 has no altsetting 0 [ 83.565825][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 83.568191][ T5983] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.572480][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.575928][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.579625][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 83.583359][ T5983] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 83.586905][ T5983] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.591369][ T5983] usb 5-1: config 168 interface 0 has no altsetting 0 [ 83.596422][ T5983] usb 5-1: string descriptor 0 read error: -22 [ 83.598496][ T5983] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.601521][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.609647][ T5983] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 83.800670][ T7796] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.809934][ T7796] UDF-fs: Scanning with blocksize 2048 failed [ 83.812743][ T7796] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.815067][ T7796] UDF-fs: Scanning with blocksize 4096 failed [ 84.371711][ T7822] ALSA: seq fatal error: cannot create timer (-22) [ 84.485868][ T7824] IPVS: sh: FWM 3 0x00000003 - no destination available [ 84.491715][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 84.503166][ T7824] tmpfs: Bad value for 'mpol' [ 84.852372][ T7838] tty tty1: ldisc open failed (-12), clearing slot 0 [ 84.890386][ T7842] netlink: 1 bytes leftover after parsing attributes in process `syz.3.578'. [ 85.219949][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 85.389955][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 85.398732][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.404300][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.407872][ T53] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.412915][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.419267][ T53] usb 8-1: config 0 descriptor?? [ 85.513976][ T7870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11336 sclass=netlink_route_socket pid=7870 comm=syz.2.588 [ 85.519708][ T7870] tmpfs: Bad value for 'mpol' [ 85.847858][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 85.853595][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.865981][ T53] usb 8-1: USB disconnect, device number 10 [ 85.884044][ T7884] fuse: Unknown parameter '' [ 85.889255][ T7884] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 86.117580][ T61] usb 5-1: USB disconnect, device number 8 [ 86.149965][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 86.188639][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 86.317359][ T24] usb 6-1: no configurations [ 86.319036][ T24] usb 6-1: can't read configurations, error -22 [ 86.383953][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 86.450124][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 86.580054][ T5966] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 86.614538][ T24] usb 6-1: no configurations [ 86.616281][ T24] usb 6-1: can't read configurations, error -22 [ 86.619499][ T24] usb usb6-port1: attempt power cycle [ 86.742686][ T5966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.746183][ T5966] usb 5-1: config 0 has no interfaces? [ 86.747994][ T5966] usb 5-1: New USB device found, idVendor=05ac, idProduct=0271, bcdDevice=dc.1b [ 86.752733][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.757432][ T5966] usb 5-1: config 0 descriptor?? [ 86.968192][ T5966] usb 5-1: USB disconnect, device number 9 [ 86.979968][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 87.011397][ T24] usb 6-1: no configurations [ 87.013134][ T24] usb 6-1: can't read configurations, error -22 [ 87.139951][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 87.161342][ T24] usb 6-1: no configurations [ 87.162896][ T24] usb 6-1: can't read configurations, error -22 [ 87.165525][ T24] usb usb6-port1: unable to enumerate USB device [ 87.604719][ T7969] netlink: 'syz.3.613': attribute type 39 has an invalid length. [ 87.609076][ T7969] veth0_macvtap: left promiscuous mode [ 87.671895][ T40] kauditd_printk_skb: 786 callbacks suppressed [ 87.671906][ T40] audit: type=1400 audit(1763781908.503:5946): avc: denied { ioctl } for pid=7975 comm="syz.0.615" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.698908][ T40] audit: type=1400 audit(1763781908.523:5947): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.706630][ T40] audit: type=1400 audit(1763781908.533:5948): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.714319][ T40] audit: type=1400 audit(1763781908.533:5949): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.722565][ T40] audit: type=1400 audit(1763781908.553:5950): avc: denied { create } for pid=7977 comm="syz.3.616" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.723095][ T7978] __nla_validate_parse: 4 callbacks suppressed [ 87.723104][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 87.735096][ T40] audit: type=1400 audit(1763781908.563:5951): avc: denied { read write } for pid=7975 comm="syz.0.615" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.742706][ T40] audit: type=1400 audit(1763781908.563:5952): avc: denied { read write open } for pid=7975 comm="syz.0.615" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.750537][ T40] audit: type=1400 audit(1763781908.563:5953): avc: denied { ioctl } for pid=7975 comm="syz.0.615" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.762447][ T7978] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 87.765887][ T40] audit: type=1400 audit(1763781908.593:5954): avc: denied { ioctl } for pid=7977 comm="syz.3.616" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24175 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.859000][ T40] audit: type=1400 audit(1763781908.683:5955): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.497771][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 88.599947][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 88.749945][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 88.754000][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.757353][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.762949][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.767932][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.772605][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.779947][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.783245][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.789018][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.794111][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.798695][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.804922][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.808070][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.812948][ T10] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.818183][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.822916][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.831097][ T10] usb 7-1: string descriptor 0 read error: -22 [ 88.833956][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.837871][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.863789][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.893458][ T8014] SELinux: Context system_u:object_r:usb_device_t:s0 is not valid (left unmapped). [ 88.991678][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 88.996759][ T8019] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 88.999190][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.629'. [ 89.003413][ T8019] batman_adv: batadv0: Adding interface: virt_wifi0 [ 89.005561][ T8019] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.013514][ T8019] batman_adv: batadv0: Interface activated: virt_wifi0 [ 89.060893][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.065127][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.084128][ T10] usb 7-1: USB disconnect, device number 11 [ 89.182098][ T8039] syzkaller0: entered promiscuous mode [ 89.184198][ T8039] syzkaller0: entered allmulticast mode [ 89.339047][ T8049] fuse: blksize only supported for fuseblk [ 89.554672][ T8064] netlink: 96 bytes leftover after parsing attributes in process `syz.1.643'. [ 89.563455][ T8064] Bluetooth: MGMT ver 1.23 [ 89.737378][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 89.915494][ T8106] SELinux: failed to load policy [ 90.529956][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 90.694219][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 90.698195][ T24] usb 5-1: config 1 has an invalid interface number: 71 but max is 2 [ 90.700830][ T24] usb 5-1: config 1 has an invalid interface number: 187 but max is 2 [ 90.703375][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.706072][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.709169][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.712768][ T24] usb 5-1: config 1 has no interface number 0 [ 90.714733][ T24] usb 5-1: config 1 has no interface number 1 [ 90.716650][ T24] usb 5-1: config 1 interface 71 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 90.720377][ T24] usb 5-1: config 1 interface 71 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 90.723721][ T24] usb 5-1: config 1 interface 71 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 90.727037][ T24] usb 5-1: config 1 interface 71 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 90.731125][ T24] usb 5-1: config 1 interface 71 has no altsetting 0 [ 90.733254][ T24] usb 5-1: config 1 interface 187 has no altsetting 0 [ 90.737234][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=48.9a [ 90.741404][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.744008][ T24] usb 5-1: Product: 怲ᭊ읬二껉ࣥி䭷 [ 90.746043][ T24] usb 5-1: Manufacturer: 9 [ 90.747448][ T24] usb 5-1: SerialNumber: 㰊 [ 90.967002][ T24] imon 5-1:1.71: unable to register, err -19 [ 90.973887][ T24] imon 5-1:1.187: unable to register, err -19 [ 90.980083][ T24] usb 5-1: USB disconnect, device number 10 [ 91.156350][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 91.159284][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 91.169716][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 91.174300][ T8155] IPVS: ip_vs_add_dest(): server weight less than zero [ 91.176509][ T61] IPVS: starting estimator thread 0... [ 91.259970][ T8157] IPVS: using max 32 ests per chain, 76800 per kthread [ 91.813657][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 92.205667][ T8204] can0: slcan on ttyS3. [ 92.270756][ T8204] can0 (unregistered): slcan off ttyS3. [ 92.814839][ T40] kauditd_printk_skb: 743 callbacks suppressed [ 92.814849][ T40] audit: type=1400 audit(1763781913.643:6699): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.824392][ T40] audit: type=1400 audit(1763781913.643:6700): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.831913][ T40] audit: type=1400 audit(1763781913.643:6701): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.892753][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.905413][ T8212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=8212 comm=syz.1.684 [ 92.939360][ T8208] bridge_slave_0: left allmulticast mode [ 92.942943][ T8208] bridge_slave_0: left promiscuous mode [ 92.945321][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.955497][ T8208] bond0: (slave bridge_slave_1): Releasing backup interface [ 92.964402][ T8208] bond0: (slave bond_slave_0): Releasing backup interface [ 92.970794][ T8208] bond0: (slave bond_slave_1): Releasing backup interface [ 92.985514][ T8208] team0: Port device team_slave_0 removed [ 92.999494][ T8208] team0: Port device team_slave_1 removed [ 93.004396][ T40] audit: type=1400 audit(1763781913.833:6702): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.008451][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.021209][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.024343][ T40] audit: type=1400 audit(1763781913.853:6703): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.039749][ T40] audit: type=1400 audit(1763781913.853:6704): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.047842][ T40] audit: type=1400 audit(1763781913.853:6705): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.060304][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.064509][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.067563][ T40] audit: type=1400 audit(1763781913.863:6706): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.086387][ T40] audit: type=1400 audit(1763781913.863:6707): avc: denied { read write open } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.095754][ T40] audit: type=1400 audit(1763781913.863:6708): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.109149][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802bd43800: rx timeout, send abort [ 93.113315][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bd43800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.120787][ C2] vcan0: j1939_tp_rxtimer: 0xffff888038382400: rx timeout, send abort [ 93.121433][ T8220] fuse: Bad value for 'fd' [ 93.124462][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888038382400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.241523][ T8212] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.244369][ T6825] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.253277][ T6825] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.257049][ T6825] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.261333][ T6825] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.530309][ T841] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.558864][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 93.598422][ T8249] netlink: 'syz.3.697': attribute type 32 has an invalid length. [ 93.601915][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 93.623137][ T8249] bond3: Setting coupled_control to off (0) [ 93.701924][ T841] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 93.705235][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.708015][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.711909][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.715080][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.717865][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.721482][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.724663][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.727492][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.730926][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.734523][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.737302][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.740823][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.744695][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.747502][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.751194][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.754330][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.757125][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.760834][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.764666][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.767473][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.771174][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.774615][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.777405][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.780855][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.787251][ T841] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 93.790256][ T841] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 93.792855][ T841] usb 5-1: Product: syz [ 93.794201][ T841] usb 5-1: Manufacturer: syz [ 93.795678][ T841] usb 5-1: SerialNumber: syz [ 93.799099][ T841] usb 5-1: config 0 descriptor?? [ 93.809736][ T841] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.014684][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=8267 comm=syz.3.702 [ 94.124354][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 94.193549][ T8278] tmpfs: User quota inode hardlimit too large. [ 94.279189][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 94.283575][ T8282] block nbd0: Unsupported socket: should be TCP or UNIX. [ 94.561976][ T8300] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 94.862441][ T8310] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 94.875768][ T8310] syzkaller1: entered promiscuous mode [ 94.878092][ T8310] syzkaller1: entered allmulticast mode [ 94.886249][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'. [ 95.288397][ T8331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 95.315688][ C3] IPVS: sh: FWM 3 0x00000003 - no destination available [ 95.410983][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 95.421779][ T8344] kvm: user requested TSC rate below hardware speed [ 95.618519][ T8360] netlink: 'syz.1.734': attribute type 64 has an invalid length. [ 95.621176][ T8360] netlink: 'syz.1.734': attribute type 4 has an invalid length. [ 95.623993][ T8360] netlink: 152 bytes leftover after parsing attributes in process `syz.1.734'. [ 95.630693][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.735'. [ 95.630775][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 95.744847][ T8376] sit0: entered promiscuous mode [ 95.750973][ T8376] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 95.797841][ T8378] openvswitch: netlink: IP tunnel dst address not specified [ 95.884664][ T8383] tipc: Started in network mode [ 95.886760][ T8383] tipc: Node identity c678a9f7a74a, cluster identity 4711 [ 95.889924][ T8383] tipc: Enabled bearer , priority 0 [ 95.894976][ T8383] syzkaller0: entered promiscuous mode [ 95.897029][ T8383] syzkaller0: entered allmulticast mode [ 95.918172][ T8383] tipc: Resetting bearer [ 96.022432][ T8381] tipc: Resetting bearer [ 96.032237][ T8381] tipc: Disabling bearer [ 96.045895][ T8392] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 96.100171][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 96.102600][ C1] usb 5-1: yurex_control_callback - control failed: -32 [ 96.106732][ T10] usb 5-1: USB disconnect, device number 11 [ 96.125899][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 96.295580][ T8409] tipc: Enabled bearer , priority 0 [ 96.300596][ T8409] syzkaller0: entered promiscuous mode [ 96.303134][ T8409] syzkaller0: entered allmulticast mode [ 96.309460][ T8409] tipc: Resetting bearer [ 96.720582][ T8437] FAT-fs (nullb0): bogus number of reserved sectors [ 96.724864][ T8437] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 97.029339][ T8469] program syz.3.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.033756][ T8469] ceph: No source [ 97.059163][ T8472] netlink: 'syz.1.770': attribute type 14 has an invalid length. [ 97.131046][ T8408] tipc: Resetting bearer [ 97.144829][ T8408] tipc: Disabling bearer [ 97.203608][ T8491] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 97.359993][ T840] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 97.404917][ T8507] netlink: 'syz.0.783': attribute type 4 has an invalid length. [ 97.531850][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.536060][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 97.542795][ T840] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 97.546436][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.554140][ T840] usb 6-1: config 0 descriptor?? [ 97.557367][ T8483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.769575][ T8481] netlink: 'syz.1.773': attribute type 9 has an invalid length. [ 97.810457][ T8536] binder: 8533:8536 ioctl c00c620f 200000000000 returned -22 [ 97.817585][ T840] usbhid 6-1:0.0: can't add hid device: -71 [ 97.827949][ T40] kauditd_printk_skb: 1472 callbacks suppressed [ 97.827962][ T40] audit: type=1400 audit(2000000000.659:8181): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.838994][ T840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 97.844099][ T40] audit: type=1400 audit(2000000000.659:8182): avc: denied { read write open } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.855351][ T40] audit: type=1400 audit(2000000000.659:8183): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.865571][ T40] audit: type=1400 audit(2000000000.669:8184): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.877821][ T40] audit: type=1400 audit(2000000000.669:8185): avc: denied { read write open } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.889943][ T40] audit: type=1400 audit(2000000000.669:8186): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.899686][ T40] audit: type=1400 audit(2000000000.689:8187): avc: denied { search } for pid=8535 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.908716][ T40] audit: type=1400 audit(2000000000.689:8188): avc: denied { read } for pid=8535 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.916378][ T40] audit: type=1400 audit(2000000000.689:8189): avc: denied { open } for pid=8535 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.923921][ T40] audit: type=1400 audit(2000000000.689:8190): avc: denied { search } for pid=8535 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.934163][ T840] usb 6-1: USB disconnect, device number 15 [ 97.952350][ T5976] hid_parser_main: 184 callbacks suppressed [ 97.952367][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.957987][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.981193][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.984268][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.993216][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.996461][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 97.999000][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 98.002082][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 98.004341][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 98.006696][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: unknown main item tag 0x0 [ 98.022808][ T5976] hid-generic 0005:0004:7FFFFFFF.0003: hidraw1: BLUETOOTH HID v0.0f Device [syz0] on syz0 [ 98.138837][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.481409][ T840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.563867][ T8598] __nla_validate_parse: 5 callbacks suppressed [ 98.563880][ T8598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.807'. [ 98.672053][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.675920][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.679442][ T840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.686927][ T840] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.692555][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.700540][ T840] usb 5-1: config 0 descriptor?? [ 98.879293][ T8617] No source specified [ 99.131075][ T840] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 99.152252][ T840] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.166413][ T8636] smc: net device hsr0 applied user defined pnetid SYZ2 [ 99.170980][ T8635] smc: net device hsr0 erased user defined pnetid SYZ2 [ 99.585181][ T5976] usb 5-1: USB disconnect, device number 12 [ 100.026095][ T8653] sit0: entered promiscuous mode [ 100.029482][ T8653] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 100.033609][ T8653] netlink: 1 bytes leftover after parsing attributes in process `syz.2.822'. [ 100.242189][ T8662] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 100.253670][ T8662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.319816][ T8666] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 100.320092][ T8667] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 100.338668][ T8667] bond4: entered promiscuous mode [ 100.342196][ T8667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.346400][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 100.351206][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 100.406068][ T8667] bond4: (slave bridge4): making interface the new active one [ 100.408807][ T8667] bridge4: entered promiscuous mode [ 100.411426][ T8667] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 100.427174][ T8667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 100.595122][ T8644] delete_channel: no stack [ 100.599421][ T8676] kAFS: No cell specified [ 100.893651][ T8690] 9pnet_virtio: no channels available for device syz [ 100.895334][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'. [ 101.076609][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'. [ 101.080285][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'. [ 101.087254][ T8696] erspan0: entered promiscuous mode [ 101.091166][ T8696] gretap0: entered promiscuous mode [ 101.093779][ T8696] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 101.097360][ T8696] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 101.169703][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 101.190774][ T5976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 101.213045][ T8703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.215835][ T8703] UDF-fs: Scanning with blocksize 2048 failed [ 101.218873][ T8703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.223907][ T8703] UDF-fs: Scanning with blocksize 4096 failed [ 101.229123][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 101.241140][ T8703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.244181][ T8703] UDF-fs: Scanning with blocksize 2048 failed [ 101.248180][ T8703] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.250852][ T8703] UDF-fs: Scanning with blocksize 4096 failed [ 101.307173][ T8710] tmpfs: Bad value for 'huge' [ 101.359966][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 101.380751][ T5976] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.383903][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.388529][ T5976] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.394318][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.397991][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.404126][ T5976] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.406495][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.412471][ T5976] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.416168][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.419566][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.429299][ T5976] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.432179][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.435652][ T5976] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.439372][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.443016][ T5976] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.454246][ T5976] usb 5-1: string descriptor 0 read error: -22 [ 101.456339][ T5976] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.459178][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.469685][ T5976] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.515496][ T8725] netlink: 'syz.1.846': attribute type 3 has an invalid length. [ 101.518292][ T8725] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 101.524051][ T8725] netlink: 224 bytes leftover after parsing attributes in process `syz.1.846'. [ 101.527466][ T8725] NCSI netlink: No device for ifindex 0 [ 101.676854][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.679676][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.691485][ T5976] usb 5-1: USB disconnect, device number 13 [ 101.840790][ C2] Unknown status report in ack skb [ 101.842990][ T8740] netlink: 'syz.0.850': attribute type 5 has an invalid length. [ 101.987175][ T8755] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 101.989645][ T8755] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 102.044992][ T8760] comedi comedi2: rti800: I/O port conflict (0x6,16) [ 102.367607][ T8777] bridge_slave_0: invalid flags given to default FDB implementation [ 102.573314][ T8788] SQUASHFS error: Failed to read block 0x0: -5 [ 102.575426][ T8788] unable to read squashfs_super_block [ 102.774991][ T8801] tipc: Enabling of bearer rejected, failed to enable media [ 102.832599][ T40] kauditd_printk_skb: 1376 callbacks suppressed [ 102.832615][ T40] audit: type=1400 audit(2000000005.669:9567): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 102.844969][ T40] audit: type=1400 audit(2000000005.679:9568): avc: denied { sys_module } for pid=8799 comm="syz.2.867" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.855854][ T40] audit: type=1400 audit(2000000005.679:9569): avc: denied { module_request } for pid=8799 comm="syz.2.867" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.872813][ T40] audit: type=1400 audit(2000000005.689:9570): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.880227][ T40] audit: type=1400 audit(2000000005.689:9571): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.889083][ T40] audit: type=1400 audit(2000000005.689:9572): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.898037][ T40] audit: type=1400 audit(2000000005.699:9573): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.921391][ T40] audit: type=1400 audit(2000000005.699:9574): avc: denied { read write open } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.949960][ T40] audit: type=1400 audit(2000000005.699:9575): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.969948][ T40] audit: type=1400 audit(2000000005.729:9576): avc: denied { read append } for pid=8812 comm="syz.1.870" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.107500][ T8829] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 103.133086][ T8829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.177300][ T8829] bond3: (slave ip6erspan0): making interface the new active one [ 103.181348][ T8829] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 103.268553][ T8837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.273510][ T8837] block device autoloading is deprecated and will be removed. [ 103.381501][ T8839] nft_compat: unsupported protocol 0 [ 103.448958][ T8839] xt_hashlimit: max too large, truncated to 1048576 [ 103.469982][ T8849] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 103.473297][ T8849] syz_tun: entered promiscuous mode [ 103.479312][ T8849] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.731866][ T8868] random: crng reseeded on system resumption [ 103.739515][ T8868] Restarting kernel threads ... [ 103.742280][ T8868] Done restarting kernel threads. [ 104.202220][ T8896] openvswitch: netlink: IP tunnel dst address not specified [ 104.203331][ T8898] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 104.239323][ T8900] __nla_validate_parse: 14 callbacks suppressed [ 104.239333][ T8900] netlink: 116 bytes leftover after parsing attributes in process `syz.1.902'. [ 104.245465][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 104.372142][ T8909] fuse: Bad value for 'fd' [ 104.490012][ T840] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 104.642924][ T840] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 104.646229][ T840] usb 6-1: config 4 has no interface number 0 [ 104.652981][ T840] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 104.656938][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.660398][ T840] usb 6-1: Product: syz [ 104.662268][ T840] usb 6-1: Manufacturer: syz [ 104.664327][ T840] usb 6-1: SerialNumber: syz [ 104.679090][ T840] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:4.28/input/input20 [ 104.886838][ T8900] input: syz0 as /devices/virtual/input/input21 [ 104.919011][ T5326] bcm5974 6-1:4.28: could not read from device [ 104.919687][ T61] usb 6-1: USB disconnect, device number 16 [ 104.928132][ T6031] bcm5974 6-1:4.28: could not read from device [ 104.952353][ T6031] udevd[6031]: Error opening device "/dev/input/event5": No such device [ 104.955289][ T6031] udevd[6031]: Unable to EVIOCGABS device "/dev/input/event5" [ 104.957751][ T6031] udevd[6031]: Unable to EVIOCGABS device "/dev/input/event5" [ 104.961590][ T6031] udevd[6031]: Unable to EVIOCGABS device "/dev/input/event5" [ 104.964210][ T6031] udevd[6031]: Unable to EVIOCGABS device "/dev/input/event5" [ 105.394701][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 105.495443][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 105.519507][ T8968] bond5: option primary_reselect: invalid value (133) [ 105.520934][ T8968] bond5 (unregistering): Released all slaves [ 105.632816][ T5939] Bluetooth: Wrong link type (-71) [ 105.659960][ T59] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 105.724751][ T8974] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 105.823515][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.829608][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.834853][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.840604][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.843326][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.849646][ T59] usb 6-1: config 0 descriptor?? [ 105.946258][ T8988] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 105.949403][ T8988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.926'. [ 105.950990][ T8990] fuse: Bad value for 'fd' [ 106.068440][ C1] ------------[ cut here ]------------ [ 106.070723][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 106.074258][ C1] WARNING: CPU: 1 PID: 5928 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780 [ 106.077439][ C1] Modules linked in: [ 106.078982][ C1] CPU: 1 UID: 0 PID: 5928 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 106.082573][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.086827][ C1] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 106.089374][ C1] Code: a4 a0 d4 00 00 00 e8 f8 46 e6 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 60 15 e3 8c e8 4a 7a a4 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 e9 4e f7 e9 f5 fc ff [ 106.097360][ C1] RSP: 0018:ffffc900006a0870 EFLAGS: 00010282 [ 106.099886][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 106.102748][ C1] RDX: ffff888032a3c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 106.105949][ C1] RBP: ffff88803a11c8e8 R08: 0000000000000001 R09: 0000000000000000 [ 106.109157][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 106.112329][ C1] R13: 0000000000000000 R14: 000000000000000c R15: ffff88803a11c8f0 [ 106.115504][ C1] FS: 000055556b314500(0000) GS:ffff8880d6b05000(0000) knlGS:0000000000000000 [ 106.115693][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 106.118236][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.118247][ C1] CR2: 00007f0df8d156c0 CR3: 000000004e824000 CR4: 0000000000352ef0 [ 106.118255][ C1] Call Trace: [ 106.118261][ C1] [ 106.118270][ C1] rate_control_send_low+0x52a/0x810 [ 106.118287][ C1] rate_control_get_rate+0x1be/0x5e0 [ 106.118302][ C1] ieee80211_beacon_get_finish+0x467/0x670 [ 106.133173][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 106.135148][ C1] ? mark_held_locks+0x49/0x80 [ 106.136643][ C1] __ieee80211_beacon_get_ap+0x79d/0x1190 [ 106.138428][ C1] __ieee80211_beacon_get+0x14c0/0x1e40 [ 106.140261][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 106.141820][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 106.143529][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 106.145404][ C1] mac80211_hwsim_beacon_tx+0x4dc/0xa40 [ 106.147156][ C1] __iterate_interfaces+0x2e5/0x650 [ 106.148775][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.150786][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.152690][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.154531][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 106.156676][ C1] mac80211_hwsim_beacon+0x105/0x1b0 [ 106.158315][ C1] __hrtimer_run_queues+0x202/0xad0 [ 106.160042][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 106.161821][ C1] ? read_tsc+0x9/0x20 [ 106.163113][ C1] hrtimer_run_softirq+0x17d/0x350 [ 106.164712][ C1] handle_softirqs+0x219/0x8e0 [ 106.166297][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.167953][ C1] __irq_exit_rcu+0x109/0x170 [ 106.169456][ C1] irq_exit_rcu+0x9/0x30 [ 106.170883][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.172728][ C1] [ 106.173762][ C1] [ 106.174776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.176746][ C1] RIP: 0010:arch_stack_walk+0x4/0x100 [ 106.178425][ C1] Code: ff ff ff e8 9e 2b 5a 00 89 e8 e6 83 e9 11 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <55> 48 89 e5 41 57 49 89 d7 41 56 49 89 ce b9 0c 00 00 00 41 55 49 [ 106.184508][ C1] RSP: 0018:ffffc900016af5f0 EFLAGS: 00000246 [ 106.186644][ C1] RAX: 0000000000000000 RBX: fffff520002d5ebf RCX: 0000000000000000 [ 106.189245][ C1] RDX: ffff888032a3c900 RSI: ffffc900016af618 RDI: ffffffff81a7e2a0 [ 106.192002][ C1] RBP: 0000000000000cc0 R08: ffffffff821a2dd0 R09: 0000000000000000 [ 106.194781][ C1] R10: ffff88802490fb40 R11: 0000000000000001 R12: 0000000000000001 [ 106.197386][ C1] R13: 0000000000000cc0 R14: 0000000000000cc0 R15: ffff88802490fa40 [ 106.200129][ C1] ? kmem_cache_alloc_noprof+0x100/0x6e0 [ 106.202116][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.204189][ C1] stack_trace_save+0x8e/0xc0 [ 106.205789][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 106.207608][ C1] ? copy_page_range+0x3398/0x6930 [ 106.209323][ C1] kasan_save_stack+0x33/0x60 [ 106.210936][ C1] kasan_save_track+0x14/0x30 [ 106.212523][ C1] __kasan_slab_alloc+0x89/0x90 [ 106.214197][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 106.215975][ C1] ? vm_area_dup+0x27/0x8d0 [ 106.217477][ C1] ? vm_area_dup+0x27/0x8d0 [ 106.218984][ C1] vm_area_dup+0x27/0x8d0 [ 106.220426][ C1] dup_mmap+0x86f/0x2280 [ 106.221787][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 106.223319][ C1] copy_process+0x3f0c/0x76a0 [ 106.224806][ C1] ? do_wp_page+0x1c59/0x52b0 [ 106.226296][ C1] ? __pfx_copy_process+0x10/0x10 [ 106.227954][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.229734][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.231561][ C1] kernel_clone+0xfc/0x930 [ 106.233175][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 106.234866][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 106.236789][ C1] __do_sys_clone+0xce/0x120 [ 106.238485][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 106.240222][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 106.241909][ C1] ? do_user_addr_fault+0x843/0x1370 [ 106.243694][ C1] do_syscall_64+0xcd/0xfa0 [ 106.245392][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.247336][ C1] RIP: 0033:0x7f0df7f85e93 [ 106.248919][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 106.255794][ C1] RSP: 002b:00007fff3eca7478 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 106.258866][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0df7f85e93 [ 106.261603][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 106.264268][ T8959] SELinux: failed to load policy [ 106.264299][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 106.264308][ C1] R10: 000055556b3147d0 R11: 0000000000000246 R12: 0000000000000000 [ 106.271274][ C1] R13: 00000000000927c0 R14: 0000000000019dc1 R15: 00007fff3eca7610 [ 106.273858][ C1] [ 106.274896][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.277335][ C1] CPU: 1 UID: 0 PID: 5928 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 106.280190][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.283442][ C1] Call Trace: [ 106.284514][ C1] [ 106.285503][ C1] dump_stack_lvl+0x3d/0x1f0 [ 106.287154][ C1] vpanic+0x640/0x6f0 [ 106.288643][ C1] ? __rate_control_send_low+0x667/0x780 [ 106.290720][ C1] panic+0xca/0xd0 [ 106.292124][ C1] ? __pfx_panic+0x10/0x10 [ 106.293751][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 106.295395][ C1] check_panic_on_warn+0xab/0xb0 [ 106.297099][ C1] __warn+0xf6/0x3c0 [ 106.298348][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 106.300077][ C1] ? __rate_control_send_low+0x667/0x780 [ 106.302073][ C1] report_bug+0x3c3/0x580 [ 106.303681][ C1] ? __rate_control_send_low+0x667/0x780 [ 106.305498][ C1] handle_bug+0x184/0x210 [ 106.306846][ C1] exc_invalid_op+0x17/0x50 [ 106.308254][ C1] asm_exc_invalid_op+0x1a/0x20 [ 106.309771][ C1] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 106.311927][ C1] Code: a4 a0 d4 00 00 00 e8 f8 46 e6 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 60 15 e3 8c e8 4a 7a a4 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 e9 4e f7 e9 f5 fc ff [ 106.318471][ C1] RSP: 0018:ffffc900006a0870 EFLAGS: 00010282 [ 106.320512][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 106.323227][ C1] RDX: ffff888032a3c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 106.326038][ C1] RBP: ffff88803a11c8e8 R08: 0000000000000001 R09: 0000000000000000 [ 106.328805][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 106.331446][ C1] R13: 0000000000000000 R14: 000000000000000c R15: ffff88803a11c8f0 [ 106.333941][ C1] ? __warn_printk+0x198/0x350 [ 106.335414][ C1] ? __warn_printk+0x1a5/0x350 [ 106.336914][ C1] rate_control_send_low+0x52a/0x810 [ 106.338529][ C1] rate_control_get_rate+0x1be/0x5e0 [ 106.340228][ C1] ieee80211_beacon_get_finish+0x467/0x670 [ 106.342021][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 106.344000][ C1] ? mark_held_locks+0x49/0x80 [ 106.345510][ C1] __ieee80211_beacon_get_ap+0x79d/0x1190 [ 106.347303][ C1] __ieee80211_beacon_get+0x14c0/0x1e40 [ 106.349019][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 106.350558][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 106.352242][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 106.354350][ C1] mac80211_hwsim_beacon_tx+0x4dc/0xa40 [ 106.356374][ C1] __iterate_interfaces+0x2e5/0x650 [ 106.358212][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.360403][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.362398][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.364515][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 106.366922][ C1] mac80211_hwsim_beacon+0x105/0x1b0 [ 106.368894][ C1] __hrtimer_run_queues+0x202/0xad0 [ 106.370739][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 106.372704][ C1] ? read_tsc+0x9/0x20 [ 106.374079][ C1] hrtimer_run_softirq+0x17d/0x350 [ 106.375642][ C1] handle_softirqs+0x219/0x8e0 [ 106.377151][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.378800][ C1] __irq_exit_rcu+0x109/0x170 [ 106.380264][ C1] irq_exit_rcu+0x9/0x30 [ 106.381596][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.383462][ C1] [ 106.384585][ C1] [ 106.385544][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.387404][ C1] RIP: 0010:arch_stack_walk+0x4/0x100 [ 106.389163][ C1] Code: ff ff ff e8 9e 2b 5a 00 89 e8 e6 83 e9 11 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <55> 48 89 e5 41 57 49 89 d7 41 56 49 89 ce b9 0c 00 00 00 41 55 49 [ 106.396111][ C1] RSP: 0018:ffffc900016af5f0 EFLAGS: 00000246 [ 106.398186][ C1] RAX: 0000000000000000 RBX: fffff520002d5ebf RCX: 0000000000000000 [ 106.400859][ C1] RDX: ffff888032a3c900 RSI: ffffc900016af618 RDI: ffffffff81a7e2a0 [ 106.403340][ C1] RBP: 0000000000000cc0 R08: ffffffff821a2dd0 R09: 0000000000000000 [ 106.405762][ C1] R10: ffff88802490fb40 R11: 0000000000000001 R12: 0000000000000001 [ 106.408273][ C1] R13: 0000000000000cc0 R14: 0000000000000cc0 R15: ffff88802490fa40 [ 106.411001][ C1] ? kmem_cache_alloc_noprof+0x100/0x6e0 [ 106.412822][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 106.414877][ C1] stack_trace_save+0x8e/0xc0 [ 106.416441][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 106.418152][ C1] ? copy_page_range+0x3398/0x6930 [ 106.419730][ C1] kasan_save_stack+0x33/0x60 [ 106.421226][ C1] kasan_save_track+0x14/0x30 [ 106.422932][ C1] __kasan_slab_alloc+0x89/0x90 [ 106.424685][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 106.426708][ C1] ? vm_area_dup+0x27/0x8d0 [ 106.428344][ C1] ? vm_area_dup+0x27/0x8d0 [ 106.429837][ C1] vm_area_dup+0x27/0x8d0 [ 106.431363][ C1] dup_mmap+0x86f/0x2280 [ 106.432957][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 106.434620][ C1] copy_process+0x3f0c/0x76a0 [ 106.436348][ C1] ? do_wp_page+0x1c59/0x52b0 [ 106.438165][ C1] ? __pfx_copy_process+0x10/0x10 [ 106.439993][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.441822][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.443709][ C1] kernel_clone+0xfc/0x930 [ 106.445372][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 106.447074][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 106.448762][ C1] __do_sys_clone+0xce/0x120 [ 106.450210][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 106.451795][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 106.453302][ C1] ? do_user_addr_fault+0x843/0x1370 [ 106.454921][ C1] do_syscall_64+0xcd/0xfa0 [ 106.456299][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.458112][ C1] RIP: 0033:0x7f0df7f85e93 [ 106.459463][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 106.465705][ C1] RSP: 002b:00007fff3eca7478 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 106.468346][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0df7f85e93 [ 106.471180][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 106.473844][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 106.476565][ C1] R10: 000055556b3147d0 R11: 0000000000000246 R12: 0000000000000000 [ 106.479157][ C1] R13: 00000000000927c0 R14: 0000000000019dc1 R15: 00007fff3eca7610 [ 106.481971][ C1] [ 106.483774][ C1] Kernel Offset: disabled [ 106.485253][ C1] Rebooting in 86400 seconds..