last executing test programs: 15.076932825s ago: executing program 4 (id=3554): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x303, 0x9, 0x2, 0xae, 0xc}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.665913005s ago: executing program 4 (id=3566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f00000001c0)=[{0x0, 0x45, 0x1800}, {0x4, 0xe6, 0x1800}, {0x0, 0xfd, 0x1000}, {0x3, 0x4000, 0x1000}, {0x3, 0x7fff, 0x1000}], 0x5) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="669b45a61741f05f55bf9e0b8d00ef4f706443", @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0x4004e502, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x60b, 0x70bd30, 0xfffffffe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) 10.399878873s ago: executing program 4 (id=3571): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000005c0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) timerfd_create(0x0, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) 9.358105125s ago: executing program 2 (id=3574): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x1, 0x2, 0x2}}, 0x14) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) userfaultfd(0x80801) r0 = gettid() timer_settime(0x0, 0x1, &(0x7f0000000340), 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "29f4a2c5db5b5961", "1bbd48cf70f81c176eecbe68fdd2941b17093d85f7a170abdf4df32d45e086af", "39d878b4", "8c8e78e8c6144b84"}, 0x38) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x5) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) 9.054643047s ago: executing program 2 (id=3575): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x303, 0x9, 0x2, 0xae, 0xc}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.741618076s ago: executing program 2 (id=3578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.972049944s ago: executing program 4 (id=3584): socket(0x1e, 0x4, 0x0) close(0x3) socket$can_j1939(0x1d, 0x2, 0x7) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) 5.011085593s ago: executing program 3 (id=3588): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, r3, 0x1, 0x123, 0x234}, 0x14}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) close_range(r0, r0, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 4.818976647s ago: executing program 0 (id=3589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x880) (fail_nth: 9) 4.434005678s ago: executing program 4 (id=3591): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8925, &(0x7f00000001c0)={'syzkaller0\x00', @ifru_data=0x0}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) socket$inet(0x2, 0xa, 0x7ff) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) 4.262136076s ago: executing program 3 (id=3592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x98, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r5, r6, 0x0, 0x10ffff) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff34, 0x0}) r7 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) pwritev2(r7, &(0x7f0000000180)=[{&(0x7f0000000240)="06b93e943f9cdbdf6e44bda8236b9025a0d405fc441f728a1874c6da16408cb587e7a88bf00cb54bacf37507df15f0a022433ec00fbd15a990250862bf54db8a9d44dd38f8f0cabf85a3ae1333b7eb2fa980c92cd0708f597b6b", 0x5a}, {&(0x7f0000001a80)="3dd8ef1805add3d0fa9d4e497bb1f4e63da4ce509411277701b91f5aaa62b170af0fe4b03667ee33c23a3b6d53fd7011ec836e99887224e0dd4acb33e7552eb96e8dab99ce56ae6ee8473f0b4951529626cc971f84f3d2bdfdeb213a1495621022b4b87be32fae85b3498304564e8391f43ffb47b1644f24f8d4ff60533c4a242795951b1735bd32d4e0a014a88c789b4815e3863620e9607d6bcfb6845b555f57a9c8c6aaa017b253f872cb43aae21b46d9f7498e8f5824f9e874a56cd50bc4c20984990c43fcb09eb4c1014233abf6ed265a650ab4280676ad0007a5a208b3a870fedcc6d9b7bc85047c621c9f6b4ae1fd5e1a4bdc598348292b554d6443edf015d14b577e874e200db39b78cf80e4b8d720836b221a8740d3f002009ee62978dd127149fa8441dadd879dbc3e8808621fcac4ca73c0bf5bf2bb4c31c6a90474132a3a77385e102eac72b502e17dd99260bd5b24899808eb88a07dc910448c21c2bdb3fe6456d73b1cf12fc2c507660131770a568236eecb3fea54106b218aa5a0b0465d539b5611c804090d188189a101e392a6d7c1d0e09f2fb76cb926d40e72eb1d28bfef3d9b5b176bf43fc0dfd563a3fb7b31f1962a48cfb1430bce18eb0f8bf964189e815c4162de5ba63f1f1076af8a111ea2207e075a9e8fcb228020a9de6bf939857ee82c739ade060f8df6c83409a4d89f65bb52ea84e3988ca2b33c031859df1bf55f28987013f588af7e15b6a55053c2a6c0aa26276153e5c1706e5e082bf613263c8b80e377077efb1918ff55af0a094256846dada61efddce4edbc0fa2036cb08a1a775efb45fa60f0a3bdab04a408cfa08827ddc2801bbbb18278c209f85993a53ad11b2ebef68130ef1351c525dc57905b779b927335b676e6e2ad7144b5f92806ad3e51817c0d0e143a39b9823478a0dcfbec5e3bd2f0164c9ab2e95445a91720aa7808bf504ca0a5917011fa7ced29bd962c01574fe3938edf872a29b6a5dfad4c2600c69cc357e7563d5eb43c96565ca2b61aa5ca67b5a592c7bfce5176011f1b022b07666b95032f158be29a03eab7e2f7f633656736be8fdeaabb8af25d2e1e2d2fc5b4d37caa8592a7b10414ddd3ce04461eba4ab803afc2e94d04615b82ac695a0c4ad2e7cbd468bc53fd8ad43d9326857fbb276b18f4c62e66c68f46d3e68a4d1268dfd9430808ebfb87b5dab570c5c33e33ea75c2ee14298bf228dd53239fac4264d493d206e3e5237f9966963cd2ba14e76e5f42605c4c4a67b73518f933d91a7b98d641abad21310311ebe353df05fa86f121394fb171189362241292fdcedc156450d4a8bf3b815d3032b79d74894c4b710f5e5890d568d2b8091aed58f109be50140b983509611881e5c9025d9121514263082db490f90a4e5e5b65afcf9c2e6b689938389e809f321631d688bc51dc74dd812158d47b1f355f0223d737b7133bcbdab90b109c51b53a2cdf6239fddea0e207a4eaaa4533615640b129ab853ecbc0688dc0e18c6e8268b6203b347d8d6a7bc636cda242d2e6b647d7712c950cb1efa021999ececb81e23058ca23dab41c1bdd5b61e806f1e6de722584bb4beeb1ff2c683f68ec32b3d3037b85f39203d542f1da31daf94abc25e779b4da381000875e981066568cbe3ba3c59f52d6f75f8593504db08ee28d2c62424e24ff5b7694dee454557ae733eb4cef547ee997c7e7c997b1b79514036b03d2cc327fce7b6122b01db6b1bf621481b57fcb27bf3437f7b80979bf5a4188920853df0e2f5f569d41e637c472aa2a5a47c4eba18c45b7034b218de32ab652c0aadf470c9d7c1a6ff23253516849f3f52e252e869aa7c9ab61e434c64131638752e029d5c035873944029ee7db8abef8f7cccf76ecf370522f4d8f33026fa284b84b439ae8236eabdbc2af3c45bc9d993fcda591fd43707f7fcb5529c028b0015e878fd7ae30c6a0700212ed1bcfbaac776ba27595a6b5aeef518d6c4e8e357f6cd5923d65eba0165a9685d8841ef9b80dff3495607c187b24c6762ce5d391212d13b2bbb5d0a28d9b3c493743bc439d27058d57ead13983f20ee047a3c4860fec9c96e3bd2a99edad7cd4372f7b99a7d58de119ee2dbec17ffc671e68f47b0db58f9a47bf9675e2a4da3b7dd04524db720d4e65ff5099a54eb3ffca2797bdbc5815a00106dd1960c387a3ea145d6ef035332b927dadda7300c79a250a7263e04d1f2fecd7afb261e06a454c4826fa65e5e3017b18233db5eed5fba9353ae523a8c669fde1558da98bcdcd2e6519a1780d759c1f0fc6a48f04b03dcf72a4bec1707685b8cdc81e2a8a8f67a7dffb54906497846e7891386a8a1a47464e71106bd623f1e040560f426fd1ddfbefb74455bba0521fa8e1b1d7e3fcd957be3a65d12a39954147501c3a15c39441aec703e9ec50ed66d7d1aefdef84433b1e212f6921e2507b09eafda1c35afb12fa76c70194df2f9ab8ff1c741f87761ff45463135bb0c6f11a758c56d2e552f4dca49741ad086691a74429c62f55681e0afca8672a960ca9dc932e7df9a42ee6fd13e3ad11d6ff38c8eda6b1117b1cb8ed7f6041bc67b3fa0eded08a90b6795a881ef319601946ee210ea66a6b5a2aa08dd1b802b9c4f130db6ec17f9c259a6e5460942de79368f5439959d9ca18b1f8e5b7d94b5754813a9b293597c25702a6186599ece79ffc1f5f96737f0fbf55a8d84383a7708d6d45a3ffca7d6d290223d00c6a0738a599ded4b1a93e8fff04e06b913cfda1fe3b3b42168c8c9993391e135cd4a59fd0cb9284b8cf9b056aed556a5fc962717c289b979e711e0002715e0ad8cea7d4c358e621be98ecf350c749a130f634d7261c94855916760aa460fa3ded0d70129045266d33f1b11d481238c76ec6c5545fc31c6249d2c502798dabda4e99d06cb7eef67a1516218cdaebd1ab8422cf4aa8babc6262da532ee6b34b33872736ce9d81a128cda04f87f8d4e24f032ca9a8fa60068597f04a45a7d8fae6b2ad2a0f072af081741410339befc105111dec4288946ed35df91c606d03c55653a70f7e83e7ffe8769d365e5d7c0c197c46e70c168bd3ce11f854ea550c9ecfd2a8688a71088668e1b4b95269d2375eb63012cea1a37a33625a350c5d2e69f90c0a49723e1e4a01e6a6903dd763abc3d21e451b2488985ba3e2592a6d11cd51bfef2dfaf5eaa12ccf09fc394848c0d01b44a4cac6a4993d310008bdd04cb601e685b2d42a45c5753731fa73e4fc1e35a3bf38a9a8d18d76896d0674b28ac1ffcb57b21642c69bed1147c14945b4abcd0ab7bbb3bd32f7e077b7da7c87ece6487386b6af794273bc7fd6f9dba405a7a0969a83e6948f9b16b4247235daedb186e744d9b10e8c074aae5d1f9fadc5e3f78f1ad7c11cb00684aff20eb46181edd4e9bf2ec342c05d5c790e0b977d26f145b6956476327ef6deb8012eecd8b8042b0d95a7005305ace1747c64af14f5996f87d5612c7ca2e4f52a6150deecd72798f2e318a63697e6148c3b254ebd561321d358629ef379ba74377e69e83f7e7c115dbe05e41844e82fce23f1198015e910d4665fbb683a8da0f74d77253b6b19cd3b237d4a63a4784be76f9007c2b1b8483de327b1106687db02c4cb8dac020f7b0a485f08743a5645462573706207f421c92ec92e3fde5e3a5e2f48c3bba4bf849bb18c7e0ca454b67964aa2a43d18e163fa75eddcc0ec8cdd3f6e19e3b9f4295ad07ad132cbbfcce076541bb4812b41f4cac9838752aee511d7460992c59a031915f868fb0132a1c9bd07ee8a0322d72f7b909d67efe23bf36cd3cf14bc85a786ded6302f7d3a6c47e078926c1ba070857b63da260598a43d1bfc20c870fdc4c1cb2e569566d2358093a94ecceaedd39b5df25a03aa56a430ea99b935183ac67c9e2d7e686f36130116ddcc7644c97f85844cb1c70eb12fa27230e46251ee4bcb93cf1d1c4eea36f55b19fe0f873cacffd4df11eedded7daa51c7ced352cabc553875665cf5b676e829301a2f158c6e2994f6483900d95f928a04fe0822f59b310f628bf18e00b2d445b69900c7b75dac93f7b5222a6e285b682227b77fad2749cf17c8823918400fecd69c59a5ad4e554e6b155e4ba32863c0edaf3450a127f77fec2dbff1018ff99dfbea64dd827aae84c1344c2a7f4a2d4754c05d5867ba0f9ad688219f1bba29530a9e0f6f269f113f0d4f89193ea5be8f13c63147241ef4c31674c2e68a439a1f15e70d26a066b66f47402195df1d34a18eef56ebc83c6f8e4a368619801e452194118b943c963fc2e5909657cd119323f5ab57f6978a48dff451e211dcd86768cd2233cbe8e6c921b696d74a8e3ced0a68f8cb81f0bbcb216f328b6d4f36415ca6a3a44494e7f1db6254ade89d09fecec7b41206d6a23a09f347cc7793c641c1ab9d0f66b402d1a70b191f9a580037abb80a4fc2548b0fd468adef69bf1c9f5478ae42c2f430f58c4a28cefab6d86c4c95a16c8aad6de2eb3ee25903a0078abaf7e3cfb3a2bdbad402c01b95d4b772fe1a3794b0d5cc25b74ca1fe8175d6d077ea090d6649dba47578b3491e2be8e9876cfe580388716f8c00301b38e61f2c029ad8575c8918d9be46add771cb9c1ae028a8bca729b98cbed832415447a8ca4c9018e289b2e7a7f01bb2167845738b28e0a8ce113bc3651603051dd0b405020bc661b6f8771d05acba1a678ac619f4638985932180baa1f7784bfda9700ed0864925e3b9558c19cd8b72ecd2018010eb15dbcbef0b01762f49cab3d3fbae20cc9b3e08db765c2686cbba468da7363872a61deeedb28f96a0b4276809d15d6b41a9b7818c6f545fdef6577bdce7696e67135bf11d8f49696ae2971e85619ef19c66c4c6f8e8c6f2e92377f3325332818fb8f006c54ee3cd2d6ff44e1c48b8fd29871aff4c0e72602d7c6edc5ca9c14f029f9178aa9d83aabc4e0aec515e3bd5c023c6940541edcfca916e8bbe6149d009b1df38f8748088c5ec069ee8f1c52a16ca8d863f11d83e4de3145cc09e64e01f1cfd615a33b2728e884d5132227ed695b6f017e4a04cf262558c2e4c76728415d1f7a8eb076be01c218cf0e1ce60291a4a96ac33983729f947a9d1dcb6b4b06f65a001abe5c51a5404018c6cf046a1a4fca17ff8754ad46bbfe01270e59ed22677e334a065cf3c2ae8bddc23661eaf0594d9e9d7d47ba14d379b61e636be57d44a753972483a75cf1171b4bb0338c6150ac79095f57124cbcf908fbb8f606db94078cb9d9b22d0f630ffff86f8a5043d2cb856cac8208ad8467f9ea62c8054a523d6dd53c70e56d8cb5bc89b694925c7a0e2647cdb931fe4e51cf59329ca786b719041316334d8febcfa622bb5ec04d7fd8182dbb63f548b86079c639074c3444e5f3e5c0b378f8affe1a5d2a77edcca181a53ab35d837fb31c16b7d2b1c0643841ef390661fc902a260c5046ba2752efe39543203e12a26b9f90ecc7de94041c3073dd5ed14f6022b98fe297580f140785839b4938db526161a79d1d07b7f825dbac2abbbea50d770cdb0d685e7aa98882eebbbbd6b6bf6354038a23d5a72388b280b6a92767329893534e1f51744a10a2e2e9f0e61f80131fe53c64b1413dbf0d6a6ab977b906e9673648b59a02d08f7595441f9c1b99cb0878d96bd3117aa5b0ba6094a5ec14effae79600397c20e6cb5634ca826ed4d204738bff4d7a04913a1fff3b6450e028c039267322b56ef2038892a08662e0c76a02cc56e477bbdc80446d1bf735cc48fd423e51c8d9e5", 0x1000}, {&(0x7f00000003c0)="b3cde7b64fbe9dc4e5fa3f6717c6b90c4f13ed09475f61e22b9a8f0dc3a0a1814458e25ea5a612e2f265e3bbc36fe2721c8b28ca7062d48d1f091a7f00adf49464fae2b62d92688599c9e55900e3de9a26d77061c3d73675cac40b701368265af62e8be5ca6639f1a37491a0d8c803119f3179d779d83362207025664cccf376b93a1bc7fcac36b01fb96a576ba411bda045418b5fc02be5b440cecc9008d60df2be66bd7504ea8f45a1a2bc6a4fc2bf9ba1135ec924a9caae3a55c36bc8434e37a84fb9c08da5184b02e5b6c0c73a637ab771df5fecee5023", 0xd9}, {&(0x7f0000000500)="cbb00a437f564db00cd930bbf21c7afe4a757fbc6145cd95c5f0c7627156a6284a8762ecf1ef24a4b93341e8a40657132c2313c91624b35442057b267b7a8c9be226ed00da0844ec58982ebb14c74215c4dca4b59877a67249754c359e5126313b9b88102e7f817183d1dc9bc726554ec3e5a1da551772da662cacc5b011b7b2fb8189184d845aef14e0edee477c856fa854576060582b1b0ff1728a375d9ce390bb5d4731dd441c431868202afe04", 0xaf}], 0x4, 0x7f, 0xc, 0x18) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r8, 0x0, 0xffffffffffffffc0) 4.231382547s ago: executing program 0 (id=3593): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000040a010100000000000000000700000b08000540fffffffd04000c000c000240000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.184008469s ago: executing program 2 (id=3594): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2, 0x30}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='nv', 0x2) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) syz_clone3(&(0x7f0000010500)={0x80802000, &(0x7f00000102c0), &(0x7f0000010300), &(0x7f0000010340)=0x0, {0x2e}, &(0x7f0000010380)=""/152, 0x98, &(0x7f0000010440)=""/92, &(0x7f00000104c0)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) prlimit64(r5, 0xf, 0x0, &(0x7f0000010580)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$ndb(&(0x7f0000010240), 0x0, 0x8080) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000010280)=0x686) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000010140)={0x3, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000010200)={r6, r4, 0x25, 0x2, @val=@tracing={r8, 0x7fffffffffffffff}}, 0x20) 3.008563854s ago: executing program 1 (id=3596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f00000001c0)=[{0x0, 0x45, 0x1800}, {0x4, 0xe6, 0x1800}, {0x0, 0xfd, 0x1000}, {0x3, 0x4000, 0x1000}, {0x3, 0x7fff, 0x1000}], 0x5) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="669b45a61741f05f55bf9e0b8d00ef4f706443", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0x4004e502, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x60b, 0x70bd30, 0xfffffffe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) 3.006929978s ago: executing program 3 (id=3597): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x1, 0x2, 0x2}}, 0x14) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) userfaultfd(0x80801) r0 = gettid() timer_settime(0x0, 0x1, &(0x7f0000000340), 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "29f4a2c5db5b5961", "1bbd48cf70f81c176eecbe68fdd2941b17093d85f7a170abdf4df32d45e086af", "39d878b4", "8c8e78e8c6144b84"}, 0x38) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x5) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) 2.928710978s ago: executing program 0 (id=3598): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000002000000079104800000000006104455e5a57d4dc9be0efc700000000000095000000"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xce, &(0x7f0000000800)=""/206, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c2a48377000000000000000000000000000000e977d16137b29d7f9c4adcee3f6540e0220e63aa9d91a840ea8eb8747c66e7a7d14d642601e2765cf1a0945915a3c91898bb8a518e19ff392defac72d9713f06d697374ce5b85288888995a615885cc53d2fcc7701ee95c3995c6b1bdfb9b558212a63a397c79cfa413a2702e461aa3b49cf5984c33d60e6"], 0x48) close(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x8, 0x4, 0x12}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd700000000000100000001800018014000200365b7468315f746f5f62026e6400000008000a0005000000"], 0x34}}, 0x4044890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(0x3) r8 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'pcm3724\x00', [0x0, 0x7, 0x407, 0x2000001, 0x32, 0x0, 0x1, 0xbd, 0x7, 0x1, 0x1007, 0x1, 0x1004, 0x4, 0xffff, 0xffff, 0xffffffa4, 0x7fffffff, 0x1ff, 0x3, 0x1, 0x10003, 0x8, 0x8, 0x2, 0x8, 0x5, 0x10003, 0x5, 0x4, 0x8245]}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x3}}, 0x14}}, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2.374113135s ago: executing program 3 (id=3599): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0xc2ce, 0x10000, 0x4001f, 0x101}, &(0x7f0000003000), &(0x7f0000000240)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2023, 0x0) listen(0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000002080)={0x7, 0xff}, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x229) 2.258844355s ago: executing program 0 (id=3600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_create(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x1fffff, 0x0, &(0x7f00000004c0)="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"}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) getpid() timer_create(0x6, &(0x7f00000001c0)={0x0, 0x8, 0x4, @thr={&(0x7f0000000000)="ca668115b8c55cb112fc72b3676f07a0ac011d5bb39173fcbeec058ce584da805a048f72e778d4a0", 0x0}}, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x3}}, 0xe8) 2.130311645s ago: executing program 4 (id=3601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120141018f991220720c0c0009d40102030109021b0001000010000904"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 1.706343575s ago: executing program 1 (id=3602): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() setpgid(0x0, r1) 1.570523974s ago: executing program 1 (id=3603): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x303, 0x9, 0x2, 0xae, 0xc}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c004, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr={0x2a, 0x2, 0x4000}, @l2={0x1f, 0x101, @any, 0x424a, 0x3}, @llc={0x1a, 0x2, 0x3, 0xa, 0x2, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) 1.523917097s ago: executing program 1 (id=3604): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/158, 0x9e}], 0x1) (async, rerun: 64) r1 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random='0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2cd8, 0x2c, 0x0, 0x1070bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x2cac, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x348370ae, 0x8}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_U32_LINK={0x8, 0x3, 0x31}, @TCA_U32_SEL={0x494, 0x5, {0xe, 0x7, 0x1, 0x7, 0x800, 0x1, 0x1, 0xfffffff8, [{0x0, 0x1, 0xef, 0xaa}, {0x7, 0x1, 0x1}, {0x8, 0xee0, 0x3, 0x235c}, {0x3, 0x4, 0x80, 0x9}, {0x4, 0x177, 0xffff, 0x9}, {0xfffeffff, 0x3, 0x2, 0x552}, {0x7fffffff, 0xff, 0x5, 0x40}, {0x4e71, 0x97d, 0x7, 0x6}, {0x1, 0x7f, 0xd8e7, 0x1}, {0x1, 0x1, 0x6, 0x1}, {0x4, 0xc, 0xa2, 0x7}, {0x2c76, 0xa, 0x4, 0x8001}, {0x2, 0x1, 0x1ff, 0x5}, {0x10001, 0x1bb5585a, 0xfffffffe, 0x2}, {0xc0, 0x1, 0x6, 0x3}, {0x0, 0x6, 0xfffffff5, 0x2}, {0x401, 0x9f2, 0xb, 0x7b98}, {0x40, 0xffff8001, 0x401, 0x7}, {0x46ff, 0x0, 0xfffffff7, 0x2}, {0x4, 0x7, 0x4, 0x2}, {0x3926, 0x5, 0x8000, 0xc4}, {0x0, 0xfff, 0xc, 0x4}, {0x40000, 0x2, 0x1, 0x80000000}, {0xf, 0x5, 0x3, 0x9}, {0x0, 0x7, 0xffffffff, 0x3c20}, {0x3, 0x2, 0x8000, 0xffffffff}, {0xa, 0x401, 0x800, 0x7}, {0x10, 0x7fffffff, 0x7f, 0x9}, {0x80000001, 0x4, 0x4, 0xfffffff4}, {0x7, 0xc, 0x9, 0x4}, {0x401, 0x3, 0x3, 0xfffff001}, {0x4, 0x6, 0x9, 0x7}, {0x5, 0x5, 0x7, 0x7ff}, {0xfffffffc, 0x684e, 0xc, 0x2}, {0x7, 0xd11, 0x73, 0x1ff}, {0x2, 0x6, 0x0, 0xe5800}, {0x2, 0x6676f32a, 0xe3d4, 0x3}, {0x57, 0x0, 0x5, 0x3}, {0x80, 0x0, 0x10001}, {0xfffffffd, 0x3, 0x9, 0x3}, {0x3, 0x1000, 0x62ef, 0x8001}, {0x454a, 0x10001, 0x5, 0x1}, {0xffffffc0, 0xff9, 0x5}, {0xe, 0xb, 0x2, 0x8001}, {0xcf9, 0x0, 0xe0000000, 0x6}, {0x8001, 0xff, 0x1ff, 0x3}, {0x1, 0x8, 0x2d8c, 0xfffff801}, {0xfffffff8, 0x7, 0x2baf, 0x7}, {0x2, 0x0, 0x1, 0x6b0}, {0x2, 0x1000, 0x8000, 0x5}, {0x9, 0x4, 0x1, 0xb547}, {0x4, 0x8000, 0x6, 0x3}, {0x5, 0x5, 0x1, 0x2}, {0x2, 0x7, 0x9, 0x3}, {0xfffffff8, 0x4, 0xb, 0xfe9}, {0xffffffff, 0x10000, 0x3, 0xc}, {0x7f, 0x2, 0x7, 0x40}, {0x2, 0xfffffffa, 0x5, 0xe}, {0x9, 0x1, 0xea7, 0x84b}, {0x400, 0x3b, 0x9}, {0x3ff, 0x0, 0xffffffff, 0xfe}, {0x5, 0x4, 0xfffffff9, 0x6}, {0x8, 0x81, 0x551d, 0xf8}, {0xe, 0x0, 0x0, 0xb3}, {0x1ff, 0xf927, 0x7fff, 0x3}, {0xb7, 0x2400000, 0xffffff7f}, {0x10, 0x7ff, 0x5, 0x5}, {0x73, 0x9, 0x7, 0xc}, {0x7, 0x3, 0x7, 0x5}, {0x8, 0xfd7, 0x1196c396, 0xfff}, {0x800, 0x4, 0x5, 0x6}, {0x2, 0x645b02d, 0x10, 0x100}]}}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_ACT={0x27ec, 0x7, [@m_mpls={0x164, 0x7, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x20000000, 0x2, 0x80000000}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x6, 0xd360, 0x4}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xf0, 0x6, "73a954b423ac62002939c82fa853f8be5823bbd126d84e21b163d0a70ece15cdc0f8cac4a9782b26033ca4fcbb3040e47377331ab224f4330399fefc17772d565023dd0f1f56619bbbda74bfe35acda86bee281d50c8144516145234251dfb0a5a791700d2b76fbe6763d7046cbf47b5047692f3606985639c3914189e40ddbb350cdc722a58c67554800e8b91388a4c46114d18da7d89810df224d17caef84ae04db638fda35cf70fe531587fb8d5b29a04fc565b87c518bea594c3a88d917b206f4b53e7445da0ff5749c05a5cd3bcb29a82fc0a6803e206208c5b842feee2fad3328283ad608ca773e941"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x1040, 0x10, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x54ccf}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x12c, 0x8, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5df2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0xda, 0x6, "b3154fe870568bc175a73523318c75c8895508b7b86fb035386ab4a5ec9961b99d9c2511631e42f5441a4f65d4b6a47ac8e7703f84e9434e42a727fc6ee932a88f96968e2b6a9cdf42467329b6fdb7c55a28a751856f49c3c2fa19683073aa7bdca1eb66cd35c8786280b8d2ae277e54c3ae6f20c5b8c6bafef2a9f7ba510753afd88c0604d8a71af5a3936387ad8fecbbd138452708809891c4070a016dca60b7e34d77287ec5bc3cd309e576538cb9822062b8e850a55b127a4cd7d3ccc0d59d7d1ca6b94fdd51182c62cddf51d97a6ed9cfe07234"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x80, 0x19, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x18, 0x3, '@+()^]-\'![#-\x0e#$-{$.\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x14000, 0x1, 0xffffffffffffffff, 0xd28, 0x9}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0xa, 0x6, "46af6348f312"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x54, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x25, 0x6, "ceb085f44be3f6d946cccf73a3ae8001602bdd6ecde6c0784a3d4d993647c98409"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xa8, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x20000000, 0x619171f6, 0x1ff}, 0x9}}]}, {0x60, 0x6, "2cc5d616e79ff928ddbbb2cf68a1ab2effc902b8dd665c188d32b3316b16107e6683c129c4cba28a268da0a3f9ed9714f7dfce198518b7c0714d99dc3447e6dafc53de10db82f89045b715ba2bf3a78b67f0963d9c773a8b9b70c8d6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x124c, 0x18b, 0x0, 0x0, {{0xb}, {0x11dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xb8, 0x2, 0x4, 0x5, 0x2, 0x6, 0x2, 0x9, 0x6, 0x0, 0x72, 0x8, 0x4, 0x8, 0xffffffff, 0x10, 0xe, 0x9, 0x8, 0x8, 0x3d3, 0x9, 0xef, 0x80000001, 0xff, 0x2, 0x3, 0x2, 0x6, 0xb9, 0x8, 0x80, 0x7fffffff, 0x2, 0x0, 0x101, 0x4, 0x1, 0x7ff, 0x6, 0x5, 0xfffffff0, 0x4, 0xf, 0x9, 0x18000000, 0xf, 0x38a, 0x7, 0x9, 0x0, 0x7, 0x5, 0x101, 0x0, 0x1ff, 0x8001, 0x1, 0x8, 0x819, 0x7, 0x200, 0x1abf, 0x98f3, 0x3e3, 0x8001, 0xeff, 0x2, 0x6, 0x400, 0x3, 0x10, 0x3, 0x9, 0xfff, 0x4, 0x545, 0xda78, 0x20000000, 0x306, 0xd, 0x0, 0x40, 0x0, 0x3, 0x80000000, 0x0, 0x81, 0x5, 0x1000000, 0xe, 0x2, 0xfffffff8, 0x8, 0x8, 0xfe, 0x7, 0x7fff, 0x7, 0x1ff, 0x2, 0x9, 0x8, 0x80000001, 0x6, 0xe24, 0x2, 0x401, 0xe88f, 0x8, 0x6, 0xfa7, 0x1ff, 0xffffffff, 0x3, 0x7, 0x8, 0x5, 0x5000000, 0xd, 0x6, 0xe5c, 0xb6a1, 0xfff, 0x0, 0x3, 0x0, 0x9, 0xcb06, 0x1ff, 0x0, 0xfffffffc, 0xe70, 0xfffffff9, 0x5, 0x2, 0x7, 0x7, 0xd5b0, 0xc11, 0x101, 0x1, 0x4, 0x4, 0x5, 0x2, 0x8, 0x9, 0xbd, 0x80000001, 0x0, 0x403, 0x7, 0x9, 0x3, 0x5, 0x0, 0x5, 0x6, 0xa881, 0xffff, 0xfffff5f3, 0x9, 0x7f, 0x8, 0x9, 0x100, 0x0, 0x1, 0x2, 0x6, 0x135a, 0xb, 0x4, 0x7, 0x28ca7f66, 0x2, 0x0, 0x0, 0xfffff409, 0x1, 0x4, 0x8, 0x1, 0x8, 0x1, 0x7, 0x0, 0xa3, 0x3, 0x0, 0x3, 0x8, 0xfffffffd, 0x6, 0x1, 0x7, 0x5, 0x5c, 0x8, 0x1ff, 0xcf, 0x3, 0x62, 0x4, 0x4, 0xfffffffc, 0x2, 0x7, 0x9b, 0x0, 0x4, 0x5, 0x8, 0x0, 0x0, 0x80000000, 0x400, 0x9, 0x5, 0x0, 0xbc5, 0x1, 0x3, 0xb, 0x7, 0x80000000, 0x7, 0x0, 0x6, 0xffffffa2, 0x2, 0x5, 0xf, 0x40400, 0xfffff4c8, 0x4000, 0x1, 0x3e79, 0x2a, 0x9, 0x7b, 0x3, 0xcc2a, 0xe6fa, 0x100, 0x3, 0x8, 0x100, 0x8, 0x0, 0x9, 0x8, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0xfffffe1f, 0x2, 0xa1bd, {0x0, 0x0, 0x2, 0x8000, 0x1, 0x9}, {0xff, 0x0, 0x3, 0x2, 0x0, 0x7}, 0x3ff, 0x7, 0x1000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x34a6, 0x7, 0xc, 0x0, 0x1000, 0x6, 0x0, 0x100, 0xcb7b, 0x8001, 0x7a1, 0x1, 0xfffffff9, 0xffffd2f6, 0x5, 0x0, 0xe, 0x6, 0x9, 0x8001, 0x0, 0xd7, 0x2, 0x2, 0xb2f7, 0x100, 0x0, 0x6, 0x4, 0xf740, 0x9, 0x0, 0x1, 0x4, 0x8, 0x0, 0x5, 0x6, 0xff, 0x6, 0x6, 0x6, 0x5, 0x3, 0x4, 0x0, 0x5, 0xe797, 0xfffeffff, 0x1, 0x5, 0x80, 0x908d, 0x2, 0x7, 0x6, 0x8, 0x8, 0x4, 0x2, 0x0, 0x2, 0x1000, 0x2, 0x9, 0x5, 0x7f, 0x0, 0x6, 0x3, 0x1, 0x1, 0x8000, 0x10001, 0x7, 0x5, 0x1, 0x9, 0x258, 0x0, 0x0, 0xff, 0x418b, 0x0, 0x6, 0x4, 0x9, 0x2000000, 0x4, 0x4, 0x3, 0x7, 0xffffff81, 0x1, 0x8000, 0x2, 0x3, 0x100, 0x7fff, 0x401, 0xe883, 0x1, 0x4b14, 0x6, 0x3ff, 0x800, 0xfffffffd, 0x400, 0xea1, 0x0, 0x9, 0x7ff, 0x5, 0x200, 0x10d0, 0xff, 0xfffffffd, 0xfffffff8, 0x8, 0x9, 0x80, 0x9, 0xfffffff0, 0x1, 0x9, 0x4, 0x8001, 0x2, 0xae6, 0x6, 0x3ff, 0x3, 0x400, 0x1, 0x3, 0x5, 0x0, 0x7, 0x800, 0x2, 0x7, 0x6, 0x310, 0x8, 0x2, 0x3, 0x7, 0x1, 0xfffffff1, 0x77ae, 0xdf, 0x8, 0x0, 0x7, 0x4, 0xfffffff7, 0x1, 0x3b97, 0x9, 0x8440, 0xae33, 0x4, 0x3, 0x3, 0x3, 0x49, 0x7fffffff, 0x9, 0x7, 0xac18, 0x8000, 0x799, 0x7, 0x1, 0xa, 0x0, 0xb, 0xffff, 0x9, 0xa, 0x81, 0x420, 0x4, 0x7fffffff, 0x1, 0xf8e2, 0x2, 0x5, 0x9, 0x6, 0x3, 0x10000, 0xfffffff8, 0x8, 0x1, 0x0, 0x9, 0x8001, 0x28a2, 0x0, 0x40, 0x400, 0x1, 0x2, 0xa, 0x3, 0xffffffff, 0x5c, 0x9, 0xe5, 0xffff, 0x5, 0x10000, 0x101, 0xd, 0x9, 0x4, 0xffffffff, 0x8, 0x10000, 0x1, 0x0, 0x2, 0x400, 0x4, 0x6, 0x2, 0x9, 0x0, 0x7fff, 0x8001, 0x5, 0x9, 0x0, 0x1ff, 0x8000, 0x1, 0x7fffffff, 0x10, 0x2, 0xffff, 0x8, 0x0, 0x9, 0x7, 0x0, 0xb1c2, 0x82, 0x51, 0x2, 0x5eb5, 0x8, 0x4, 0xb4d6, 0x25, 0x2a30]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x39, 0x0, 0x6, 0x6, 0x101, {0xb7, 0x1, 0x6, 0x1000, 0x8, 0x80}, {0x10, 0x0, 0x7, 0x73, 0x3, 0xfffff8e5}, 0x2, 0x7e69, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x1, 0x5, 0xfffffff9, {0x7, 0x2, 0x1, 0x5d23, 0x0, 0x570}, {0x2, 0x1, 0x1, 0x3, 0xffff, 0xb}, 0x9, 0x6183d78, 0x4}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x0, 0xfffffff9, 0x3, 0x1, 0x10100, 0xc, 0xe3, 0xd, 0x0, 0x7, 0x12a, 0x5, 0x7, 0xfffffffe, 0x0, 0xfff, 0x8, 0x6, 0x6, 0xab, 0xc, 0xfffffff0, 0x0, 0x3, 0x8, 0x9, 0x8001, 0x9, 0x1000, 0x0, 0x5, 0x200, 0x3362, 0x7, 0x4, 0x3, 0x51b, 0x2, 0x8, 0x2, 0xfffffffc, 0x8, 0xffffffff, 0x0, 0x1, 0x7f, 0xd, 0x5, 0x8, 0x4, 0x1, 0x7, 0x100, 0x5, 0x8, 0x5, 0x9, 0xb4, 0x2, 0x401, 0x3ff, 0x2, 0x2, 0x7, 0x6b2e, 0x2d11, 0x401, 0x9f, 0x7, 0xba4, 0x7f, 0x5, 0x1, 0xffff, 0xd0df, 0x3ff, 0x4800000, 0xffffffc0, 0x1, 0x0, 0x4, 0x4, 0x81, 0xffffffc0, 0x8, 0xb6ba, 0x4, 0x10000, 0x9, 0x7ff, 0xa, 0x9, 0x44c7f2a6, 0x9, 0x1, 0x2, 0x5, 0xfff, 0x5, 0xe, 0x2, 0x8, 0x80000001, 0x10, 0x4, 0x1, 0x4, 0x8, 0x3b4, 0x70000000, 0x7, 0xb, 0x6, 0x1000, 0x345, 0x7, 0x9, 0x1a, 0x9, 0x7, 0x4, 0xfffffffa, 0x8, 0xffffffff, 0xfe57, 0x7, 0x6, 0x6, 0x1, 0x3, 0x4, 0x80000000, 0x4, 0x3, 0xf, 0xffff, 0x5, 0x2, 0x7fff, 0x2cd, 0x4, 0xf8d9, 0xff, 0xfffffd30, 0x667, 0x7fffffff, 0x8e, 0x47b3, 0x0, 0x8, 0x0, 0x0, 0x8, 0x5, 0x8, 0x7fff, 0x7, 0x200, 0x509a000, 0xffffff53, 0x4, 0x3643, 0x400, 0xfffffff9, 0x4f, 0x9, 0x5, 0x800, 0x2, 0x26b, 0xa7, 0x7, 0x4, 0xc5a4, 0x5, 0x58f17e08, 0x81, 0xa, 0x8, 0x9, 0xa, 0x9, 0x1, 0x101, 0x5, 0x9, 0x9, 0x4, 0xae4, 0x0, 0x9, 0x7, 0xe2c, 0x2, 0x101, 0xda3e, 0xa, 0xffffff25, 0xfffffffe, 0x6, 0x7, 0x1000, 0x80, 0x7, 0x101, 0xfffffff8, 0x9, 0x7, 0x1, 0x6, 0x843, 0x0, 0x8aa, 0x3, 0x0, 0x6, 0x1, 0x6, 0xffffff9c, 0x8001, 0x8, 0x1ff, 0x10, 0xffffff7a, 0x6, 0x1000, 0x0, 0x5, 0x2, 0xffe, 0x1, 0x0, 0x1, 0x2, 0x61, 0x7, 0x7, 0x40, 0x9, 0x1d7, 0x8, 0x2, 0x3, 0x8, 0x7, 0x81, 0x0, 0x1, 0x1ff, 0xfffffffb, 0x1ff, 0x3, 0x2, 0x8, 0x40]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xfffffffa, 0x9, 0x10001, {0x3, 0x3, 0x1ff, 0x5, 0x5, 0x6}, {0x2, 0x2, 0x6, 0x7f, 0x8, 0x22}, 0xda8, 0xfffffffb, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffffb, 0x8, 0x1, 0x3, 0x7be3efe2, 0x10, 0x4, 0x1, 0x4, 0x100, 0x7, 0x8, 0x9, 0xfff, 0x7f, 0x5, 0x2, 0x2, 0x100, 0x4, 0x80000001, 0x400, 0xe2a0, 0xf1, 0x6, 0x10, 0x0, 0x7fff, 0xffff, 0x1, 0xfff, 0x0, 0x0, 0x9, 0x2, 0xce74, 0xfffff967, 0x1, 0x400, 0x1, 0x3, 0xfe2, 0x5, 0x3, 0x9, 0x9, 0xa23f, 0x4, 0x9, 0x4, 0x3, 0x200, 0x6, 0x9, 0xfffffffe, 0x7, 0x1, 0x8, 0x84c, 0x2, 0x1, 0x8, 0x2, 0x7, 0x8, 0x7, 0x7, 0x800, 0xd, 0x2, 0xc, 0x7f, 0x45, 0x2, 0x731350e5, 0xffff60ed, 0x10, 0x5, 0xffffffff, 0xf1c, 0x49, 0x4c623fa5, 0x3, 0x7, 0x0, 0x4, 0x4, 0x17, 0x80, 0x366, 0x4, 0x4, 0x1000, 0x7, 0x6, 0x8, 0xfffffffb, 0x728, 0x3, 0x1, 0x2, 0x2, 0x0, 0x2, 0x6, 0x4, 0x6, 0xe, 0x7, 0x8, 0xe, 0x8000, 0x4, 0x101, 0x0, 0x7b2, 0x6, 0x8, 0x1ff, 0x3, 0x3, 0xe8eb, 0x7f, 0x1, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0x1000, 0x2, 0x2, 0x0, 0x0, 0x28, 0xffffff81, 0x40, 0x8, 0x1000, 0x2, 0x4, 0x3ff, 0x4, 0x3, 0xd, 0xa, 0x2, 0x28, 0x5, 0xfffffffc, 0x7, 0x8, 0x4de, 0x5, 0x4, 0xd6b, 0x8, 0x7ff, 0x6f3, 0xc3b1, 0xff, 0x6, 0x6, 0x8a, 0x80000000, 0x3ff, 0x4, 0x0, 0x5, 0x5, 0x2, 0xfffff413, 0x2, 0x7, 0x1, 0x6, 0x5, 0xf, 0x7fff, 0x9, 0x9, 0x3, 0x3, 0x8000, 0x2, 0x9, 0x4, 0x4, 0x4, 0x5, 0x282, 0x7, 0x13, 0x0, 0x4, 0x0, 0x2, 0x8001, 0x9, 0x7, 0xd6, 0xfffffffe, 0xaa55, 0x40, 0xe7, 0x6, 0x9, 0xed, 0x3, 0x8000, 0x7, 0x6, 0x1, 0x2, 0x1, 0x8, 0x5, 0x0, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x3, 0x100, 0x6, 0x8, 0x3, 0x1, 0x37, 0x8001, 0x9, 0x0, 0x238, 0x0, 0xfffffffb, 0x9, 0x0, 0x7fff, 0x5909, 0x8, 0xff33, 0x8, 0xda2, 0x2, 0x80000000, 0xe685, 0x800, 0x2, 0x4a, 0x8a, 0x4, 0xfffffffc, 0x1000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x1, 0xfffff000, 0x43f9, 0x5, {0x3, 0x1, 0x200, 0x3, 0x8a, 0x9}, {0x11, 0x1, 0xec, 0x0, 0x0, 0xad}, 0x7, 0x80000001, 0x8001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xca77, 0x5, 0xfffeffff, 0x2, 0x5, {0xfb, 0x0, 0x2, 0x7, 0x8, 0xa43}, {0x0, 0x2, 0x7533, 0x7fff, 0x8, 0x5}, 0x0, 0x6, 0x5}}]]}, {0x47, 0x6, "4b47fb26676d122c9f1f3ca91f5927cfcdfe516f836edbd1ff62b04785fcba0bd51c952186fd65c14def41c10d3642adc37ab5c821d3f87623cbee6a933affcd97acc9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x150, 0x2, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x20000000, 0x7, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xc}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, {0xb3, 0x6, "8cd06334c828eba8589462c151876b4cf5021d53d790c9ec71f864b9ad2c1bb47a1604685cf9e75612d5017125937e0e8aaa9d11d234fe9900a4f735ce805e509e70194597c128575bad118903dce40272a0df2ae10bc0e458e54b1ad5beab8e4e4fc10c6d309cefc104728fc9bcf146d97100dc782ab876a9a3f03936c123982b67a7b7750cd2b09987774dd0edabc562f363af0c8fcb4c69eb87dec20fe869be034023adb09d7b10e6be6c4adf9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2cd8}}, 0x4000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.026889002s ago: executing program 0 (id=3607): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xfffffe72, 0x0, 0x0}) r2 = socket(0x1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r3, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce9866", "fe017c9f4e95f742"}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x300, 0x4}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r4, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) setresuid(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) getsockopt(r7, 0x8, 0x1, &(0x7f0000000300)=""/216, &(0x7f00000001c0)=0xd8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x1fff}) 970.332183ms ago: executing program 2 (id=3608): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000040a010100000000000000000700000b08000540fffffffd04000c000c000240000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 668.504394ms ago: executing program 2 (id=3609): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x303, 0x9, 0x2, 0xae, 0xc}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 240.242524ms ago: executing program 3 (id=3610): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/4, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000000000006e9a7c9f3c5081be0a51384dcdacc3c8327aae57c133bb66f442ef2ccda3ef01280473e3b2b7626760ed6c5ef690aaa8310f598c89e333035d0b0c4575bdd31539"], 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10080, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setreuid(0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000180)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES64=r4], 0x32600) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) landlock_create_ruleset(&(0x7f0000000040)={0x800, 0x3}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x2458, 0x3}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000001180)={0x1, 0x400002}, 0x0) 235.994747ms ago: executing program 1 (id=3611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88a24000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05f9ff050000000800260000000000000000", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000004002a0004002d80"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x62, {0x4, 0xcd, 0x7, "af3bb0249d36e9e82a306993eb5d00cfa532d55412c718b94819bc15415be22642368ff4e9f9755b723ba0b1462b3bbb43c591c9879d0bcff64684e2caff5d95a1ce7d223291171caa7a2bba96f74338431cb425afb4715ba77df37538a8fe"}}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x78, "0d1795006ff6534368701d03d6d3929674bd40d453bbbb270fe069d8ab29f3cdfc67b59abfe58051c260df60d68a0a855b9eae15d1a0a433199d066f759c3dd2f6b4b2584f5c4b2abc3595ec0d2e1a369f4584eda916d259bfe1c08d05121647b245379fd5096d3a00aa6d38f6137786d0c54b5b240fc13d"}, {0xdd, 0xd8, "1d85b82888b0d3a69c45bb87837e77c3fced2eded16bbd2ec5c89a7bba3520eb7cef83dcaeb557093a67ab09b08c36164907c69c6066aab331c2a686d771c09f1b51340610818ec0a41169429d804089f018ba93bdfa39d6149e135dd6d09a4e0a25417d977d667ddc6d4291b0aab2be7bc8acbf63bd402e632db6f8506ca4e606a0cae1901387955606451165434c2fc138ef920cfa8d24c593622d82b73ebb404af2c24dd06357bd134a16509960caf99c37f80cdbcd6976aa4a499e6cfecd1592fc3c21f0c2dc8f99922ecb8bebc9f56b23c9f279c6e0"}, {0xdd, 0xfc, "688a0ab8653d3999111a1f59fbe868fde4d13054be916f2e6bdee18f06208d1878a9acaf6cafca2e08c8969cd08f8e9643ed0c1019eda31f3d3fef3852985e795548d230270ea29468544f2f58a1025474f122c1167fd953c2efc27d84a78346bb9b4b36c990b35738862e0cf5bacd8a641c3400cf2fca3c7411f664d745f5e0e6b3c929dbce7aefa1a6e09ae911c5c2b093c0b8c57e74b92cda974c0cafb1c25558c964fad737ddee1a45e38265f3229ff1c6c71721a652100dcbceca5ae7cfccae70134376461ab99169902ff243b694bf9ad3e9366c0589ba9108a7747238facac2f40847ed1270a10bd97e382efb776645b0fb3aac47dc42adfb"}, {0xdd, 0x70, "b6d845e1cbe0501d73c8d60a0ec750914c24d1fa27bc3b11cc3086d8602d4fa32325f4b1992c69bb62fc6845962ac5050d693a0a8b0f4339d4b3646644b1a12f33c95c8b137f8e89e0f134f3a291a2f4aaa3127d671c343cbccb0799d41d01b7d5ae33d2e24e1b91ef9a7434fa1c5ab0"}]}, 0x35e) nanosleep(&(0x7f00000001c0), &(0x7f0000000180)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="500000000802110f393dacee264ce30a2bb69c058dd7000108021100000008021100000010000000000000000000640001000006020202020202010882848b960c1218249c07200ee514b603e8a57c8070d0f37f26e31b1c91108d183fb080c3642ed45ab2bfcfdb0fb668062ed41900ea301e409aba74be557b93c9a0b36fd736af0dd5104facd538d7a0a23f76f5a42642d44a345dfe54475408"], 0x36) 0s ago: executing program 0 (id=3612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f00000001c0)=[{0x0, 0x45, 0x1800}, {0x4, 0xe6, 0x1800}, {0x0, 0xfd, 0x1000}, {0x3, 0x4000, 0x1000}, {0x3, 0x7fff, 0x1000}], 0x5) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="669b45a61741f05f55bf9e0b8d00ef4f706443", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0x4004e502, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x60b, 0x70bd30, 0xfffffffe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) kernel console output (not intermixed with test programs): : batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.900221][ T5135] Bluetooth: hci0: command 0x041b tx timeout [ 1145.054893][T17785] hsr_slave_0: entered promiscuous mode [ 1145.062609][T17785] hsr_slave_1: entered promiscuous mode [ 1145.354804][T17785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.367884][T17785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.378849][T17785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1145.674708][T17865] qnx6: unable to set blocksize [ 1146.614328][T17785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.636737][T17785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.647896][T17785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1147.041369][T11547] Bluetooth: hci0: command 0x041b tx timeout [ 1147.111497][T17872] netlink: 'syz.3.3034': attribute type 21 has an invalid length. [ 1147.119453][T17872] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1147.225669][T17785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.266693][T17785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.301205][ T5936] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1147.397632][T17785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1147.471776][T17872] netlink: 'syz.3.3034': attribute type 4 has an invalid length. [ 1147.479798][T17872] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1147.522188][T17886] netlink: 'syz.1.3038': attribute type 21 has an invalid length. [ 1147.530149][T17886] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1147.681273][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 1147.715463][ T5936] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1147.731816][T17889] batadv2: entered promiscuous mode [ 1147.739292][T17889] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1147.746687][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.794403][T17883] batadv1: entered promiscuous mode [ 1147.802724][T17883] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1147.813985][ T5936] usb 1-1: config 0 descriptor?? [ 1147.921754][ T5936] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1147.983574][ T5936] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 1147.997948][T17785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.020504][ T5936] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1148.154257][T17785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.176347][ T5936] usb-storage 1-1:0.0: device ignored [ 1148.219493][T17785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1148.312220][T17886] netlink: 'syz.1.3038': attribute type 4 has an invalid length. [ 1148.332237][T17886] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1148.462348][ T1207] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1148.675890][ T1207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1148.688600][ T1207] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1148.898426][ T1207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.922874][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.954525][ T1207] usb 3-1: Product: ఇ [ 1148.968513][ T1207] usb 3-1: Manufacturer: 㠅ᶯ鎃皣⊎곳잏쌚귉삇걭䰱뤛⨦ⵓ⫌듷畘 [ 1148.998751][ T1207] usb 3-1: SerialNumber:  [ 1149.031300][T17785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1149.049194][T17892] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1149.078512][T17785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1149.115709][T17785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1149.235207][T11547] Bluetooth: hci0: command 0x041b tx timeout [ 1149.779085][T17785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1149.837993][ T5936] usb 1-1: USB disconnect, device number 78 [ 1150.140367][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.309455][T17919] bond1: option ad_actor_sys_prio: invalid value (0) [ 1150.318353][T17919] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1150.339888][T17919] bond1 (unregistering): Released all slaves [ 1150.442262][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.466424][T17921] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 1150.500565][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.510486][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.546658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.554959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.659344][T17927] geneve2: entered promiscuous mode [ 1150.665245][T17927] geneve2: entered allmulticast mode [ 1150.718245][ T977] kernel read not supported for file /dsp (pid: 977 comm: kworker/0:2) [ 1151.256360][T17938] veth0_to_bridge: entered promiscuous mode [ 1151.282270][T11547] Bluetooth: hci0: command 0x041b tx timeout [ 1151.293420][T17937] veth0_to_bridge: left promiscuous mode [ 1151.676081][ T1207] cdc_ncm 3-1:1.0: bind() failure [ 1151.686334][ T1207] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1151.696585][ T1207] cdc_ncm 3-1:1.1: bind() failure [ 1151.733746][ T1207] usb 3-1: USB disconnect, device number 62 [ 1151.819572][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.760449][ T30] audit: type=1400 audit(1151.678:1358): avc: denied { setopt } for pid=17955 comm="syz.0.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1153.049122][T17947] qnx6: unable to set blocksize [ 1153.911344][ T1207] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1153.983425][T17785] veth0_vlan: entered promiscuous mode [ 1154.017759][T17785] veth1_vlan: entered promiscuous mode [ 1154.164137][T17785] veth0_macvtap: entered promiscuous mode [ 1154.171212][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 1154.179468][ T1207] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1154.553512][T17785] veth1_macvtap: entered promiscuous mode [ 1154.591153][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.604519][ T1207] usb 1-1: config 0 descriptor?? [ 1154.688727][ T1207] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1154.711986][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.736758][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.767601][ T1207] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 1154.808128][ T2965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.839601][ T1207] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1154.850452][ T2965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.863642][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 1154.873547][ T2965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.893207][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.906571][ T1207] usb-storage 1-1:0.0: device ignored [ 1155.021923][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1155.263053][ T5898] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1155.294702][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.348433][T17135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.393245][ T5898] usb 4-1: config 0 descriptor?? [ 1155.418584][T17135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.460937][ T5898] cp210x 4-1:0.0: cp210x converter detected [ 1155.538284][T17135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.574562][T17135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.650233][ T5898] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1155.856726][ T5898] cp210x 4-1:0.0: querying part number failed [ 1155.874158][ T5898] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1155.907782][ T5898] usb 4-1: USB disconnect, device number 52 [ 1155.949435][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1155.977314][ T5898] cp210x 4-1:0.0: device disconnected [ 1156.129555][T13732] usb 1-1: USB disconnect, device number 79 [ 1156.632005][T17999] netlink: 'syz.0.3063': attribute type 21 has an invalid length. [ 1156.639914][T17999] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1156.679810][T17999] netlink: 'syz.0.3063': attribute type 4 has an invalid length. [ 1156.758674][T17999] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1157.061714][T18004] geneve2: entered promiscuous mode [ 1157.067229][T18004] geneve2: entered allmulticast mode [ 1157.274080][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.301453][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.313508][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.325681][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.338853][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.835950][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1157.982139][T17999] batadv0: entered promiscuous mode [ 1157.988867][T17999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.433980][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 1158.886402][ T6111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.937306][T18013] team1: entered promiscuous mode [ 1158.942788][T18013] team1: entered allmulticast mode [ 1158.954544][T18013] 8021q: adding VLAN 0 to HW filter on device team1 [ 1159.088461][T18018] team1: entered promiscuous mode [ 1159.094220][T18018] team1: entered allmulticast mode [ 1159.125349][T18018] 8021q: adding VLAN 0 to HW filter on device team1 [ 1159.435537][ T6111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.573585][ T6111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.719197][ T6111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.843194][ T5135] Bluetooth: hci3: command tx timeout [ 1160.161792][ T1207] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1160.179345][T18009] chnl_net:caif_netlink_parms(): no params data found [ 1160.321772][ T1207] usb 1-1: device descriptor read/64, error -71 [ 1160.530258][T18040] fuse: Unknown parameter 'obj_type' [ 1160.591194][ T1207] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1160.751199][ T1207] usb 1-1: device descriptor read/64, error -71 [ 1161.139830][ T1207] usb usb1-port1: attempt power cycle [ 1161.532120][ T1207] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1161.689681][ T1207] usb 1-1: device descriptor read/8, error -71 [ 1162.090695][ T5135] Bluetooth: hci3: command tx timeout [ 1162.271319][ T1207] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1162.327810][ T1207] usb 1-1: device descriptor read/8, error -71 [ 1162.530359][ T1207] usb usb1-port1: unable to enumerate USB device [ 1162.546919][T18070] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1162.803009][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.814212][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.825003][ T6111] bond0 (unregistering): Released all slaves [ 1163.314157][ T6111] bond1 (unregistering): Released all slaves [ 1163.345353][T18070] 0XD: renamed from macvtap0 (while UP) [ 1163.372980][T18070] 0XD: entered allmulticast mode [ 1163.397470][T18070] veth0_macvtap: entered allmulticast mode [ 1163.408080][T18070] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 1164.161451][ T5135] Bluetooth: hci3: command tx timeout [ 1164.971139][ T6111] tipc: Left network mode [ 1165.179343][T18009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.196603][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.218658][T18009] bridge_slave_0: entered allmulticast mode [ 1165.232741][T18009] bridge_slave_0: entered promiscuous mode [ 1165.250388][T18009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.259106][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.267548][T18009] bridge_slave_1: entered allmulticast mode [ 1165.309696][T18009] bridge_slave_1: entered promiscuous mode [ 1165.315797][T13732] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1165.501547][T18098] geneve2: entered promiscuous mode [ 1165.507063][T18098] geneve2: entered allmulticast mode [ 1165.524524][T13732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.542177][T13732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1165.663222][T13732] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1165.778587][T13732] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1165.796234][T13732] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1165.805535][T13732] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1166.331205][T13732] usb 2-1: Manufacturer: syz [ 1166.339373][T11547] Bluetooth: hci3: command tx timeout [ 1166.384135][T13732] usb 2-1: config 0 descriptor?? [ 1166.812897][T18009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.945944][T18091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.103557][ T6111] hsr_slave_0: left promiscuous mode [ 1167.115103][ T6111] hsr_slave_1: left promiscuous mode [ 1167.127185][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.152902][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.178069][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.238592][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.396088][ T6111] veth1_macvtap: left promiscuous mode [ 1167.411269][ T6111] veth0_macvtap: left allmulticast mode [ 1167.439114][ T6111] veth0_macvtap: left promiscuous mode [ 1167.559158][ T6111] veth1_vlan: left promiscuous mode [ 1167.596198][ T6111] veth0_vlan: left promiscuous mode [ 1168.411715][T11547] Bluetooth: hci3: command 0x0405 tx timeout [ 1168.732183][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1170.735775][T18009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.760916][T18142] geneve0: Caught tx_queue_len zero misconfig [ 1170.851260][ T1207] usb 2-1: USB disconnect, device number 55 [ 1170.874814][T18009] team0: Port device team_slave_0 added [ 1170.920910][T18009] team0: Port device team_slave_1 added [ 1171.256406][T18161] NILFS (nbd4): device size too small [ 1171.877263][T18009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.992114][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.037400][T18009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.116831][T18009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.145967][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.324554][T18009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.717616][ T30] audit: type=1400 audit(1172.158:1359): avc: denied { ioctl } for pid=18177 comm="syz.0.3099" path="socket:[59826]" dev="sockfs" ino=59826 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1172.752357][T11547] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1174.876819][T18175] geneve2: entered promiscuous mode [ 1174.882701][T18175] geneve2: entered allmulticast mode [ 1175.267242][T18009] hsr_slave_0: entered promiscuous mode [ 1175.395324][T18009] hsr_slave_1: entered promiscuous mode [ 1175.452120][T18009] debugfs: 'hsr0' already exists in 'hsr' [ 1175.458427][T18009] Cannot create hsr debugfs directory [ 1176.730901][ T6111] IPVS: stop unused estimator thread 0... [ 1176.921299][ T5936] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1176.983600][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 1176.994651][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 1177.126197][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1177.156608][ T5936] usb 5-1: config 254 has an invalid interface number: 251 but max is 1 [ 1177.187256][T18221] ceph: No mds server is up or the cluster is laggy [ 1177.261845][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 1177.264426][ T5936] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.342272][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 1177.410085][ T5936] usb 5-1: config 254 has 1 interface, different from the descriptor's value: 2 [ 1177.493337][ T5936] usb 5-1: config 254 has no interface number 0 [ 1177.642607][ T5936] usb 5-1: config 254 interface 251 altsetting 67 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1177.686726][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.699732][ T5936] usb 5-1: config 254 interface 251 altsetting 67 has an invalid endpoint descriptor of length 3, skipping [ 1177.933888][ T5936] usb 5-1: config 254 interface 251 altsetting 67 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1178.054577][ T5936] usb 5-1: config 254 interface 251 altsetting 67 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.101365][ T5898] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1178.119539][ T5936] usb 5-1: config 254 interface 251 has no altsetting 0 [ 1178.143558][ T5936] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice= c.c6 [ 1178.162421][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.194027][ T5936] usb 5-1: Product: syz [ 1178.198736][ T5936] usb 5-1: Manufacturer: syz [ 1178.224417][ T5936] usb 5-1: SerialNumber: syz [ 1178.283265][ T5898] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1178.317219][ T5898] usb 1-1: config 0 has no interface number 0 [ 1178.343807][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1178.371188][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.423740][ T5898] usb 1-1: Product: syz [ 1179.432377][ T5936] qmi_wwan 5-1:254.251: probe with driver qmi_wwan failed with error -22 [ 1179.778136][ T5898] usb 1-1: Manufacturer: syz [ 1179.787012][ T5898] usb 1-1: SerialNumber: syz [ 1179.800171][ T5898] usb 1-1: config 0 descriptor?? [ 1179.836134][ T5936] usb 5-1: USB disconnect, device number 59 [ 1180.723947][ T5898] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1180.741549][ T5898] uvcvideo 1-1:0.64: No valid video chain found. [ 1180.787988][T18264] geneve2: entered promiscuous mode [ 1180.795201][T18264] geneve2: entered allmulticast mode [ 1180.844897][ T5898] usb 1-1: USB disconnect, device number 84 [ 1181.459392][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1181.471732][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1181.505199][T18271] ceph: No mds server is up or the cluster is laggy [ 1181.786033][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1181.851757][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1182.584261][T18009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1182.616409][T18009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1182.875157][T18009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1182.926927][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1182.934169][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1182.946704][T18009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1182.956594][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1183.047312][T18292] ceph: No mds server is up or the cluster is laggy [ 1183.116682][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1183.491444][T13732] libceph: connect (1)[c::]:6789 error -101 [ 1183.497605][T13732] libceph: mon0 (1)[c::]:6789 connect error [ 1184.187090][T18009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.235041][T18009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.284134][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.291298][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.492269][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.499563][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.812088][ T30] audit: type=1400 audit(1184.238:1360): avc: denied { name_connect } for pid=18319 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1185.317107][T18325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.656707][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'. [ 1185.665974][T18325] openvswitch: netlink: Flow actions attr not present in new flow. [ 1186.205321][T18009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.548895][T18009] veth0_vlan: entered promiscuous mode [ 1186.776793][T18009] veth1_vlan: entered promiscuous mode [ 1187.527493][T18009] veth0_macvtap: entered promiscuous mode [ 1187.600365][T18009] veth1_macvtap: entered promiscuous mode [ 1187.744655][T18009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.989429][T18009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.218833][T17135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.251257][T17135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.518063][T17135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.529886][T17135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.896896][T11547] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1188.908244][T11547] CPU: 0 UID: 0 PID: 11547 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1188.908275][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1188.908290][T11547] Workqueue: hci5 hci_rx_work [ 1188.908321][T11547] Call Trace: [ 1188.908328][T11547] [ 1188.908335][T11547] dump_stack_lvl+0x16c/0x1f0 [ 1188.908356][T11547] sysfs_warn_dup+0x7f/0xa0 [ 1188.908374][T11547] sysfs_create_dir_ns+0x24b/0x2b0 [ 1188.908388][T11547] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1188.908401][T11547] ? find_held_lock+0x2b/0x80 [ 1188.908419][T11547] ? do_raw_spin_unlock+0x172/0x230 [ 1188.908434][T11547] kobject_add_internal+0x2c4/0x9b0 [ 1188.908448][T11547] kobject_add+0x16e/0x240 [ 1188.908459][T11547] ? __pfx_kobject_add+0x10/0x10 [ 1188.908471][T11547] ? do_raw_spin_unlock+0x172/0x230 [ 1188.908484][T11547] ? kobject_put+0xab/0x5a0 [ 1188.908499][T11547] device_add+0x288/0x1aa0 [ 1188.908514][T11547] ? __pfx_dev_set_name+0x10/0x10 [ 1188.908528][T11547] ? __pfx_device_add+0x10/0x10 [ 1188.908542][T11547] ? mgmt_send_event_skb+0x2fb/0x460 [ 1188.908561][T11547] hci_conn_add_sysfs+0x17e/0x230 [ 1188.908580][T11547] le_conn_complete_evt+0x1260/0x2150 [ 1188.908599][T11547] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1188.908614][T11547] ? hci_event_packet+0x459/0x11c0 [ 1188.908633][T11547] hci_le_conn_complete_evt+0x23c/0x370 [ 1188.908652][T11547] hci_le_meta_evt+0x357/0x5e0 [ 1188.908668][T11547] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1188.908685][T11547] hci_event_packet+0x685/0x11c0 [ 1188.908700][T11547] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1188.908720][T11547] ? __pfx_hci_event_packet+0x10/0x10 [ 1188.908737][T11547] ? kcov_remote_start+0x3c9/0x6d0 [ 1188.908751][T11547] ? lockdep_hardirqs_on+0x7c/0x110 [ 1188.908771][T11547] hci_rx_work+0x2c5/0x16b0 [ 1188.908788][T11547] ? rcu_is_watching+0x12/0xc0 [ 1188.908805][T11547] process_one_work+0x9cf/0x1b70 [ 1188.908824][T11547] ? __pfx_process_one_work+0x10/0x10 [ 1188.908840][T11547] ? assign_work+0x1a0/0x250 [ 1188.908853][T11547] worker_thread+0x6c8/0xf10 [ 1188.908870][T11547] ? __kthread_parkme+0x19e/0x250 [ 1188.908886][T11547] ? __pfx_worker_thread+0x10/0x10 [ 1188.908898][T11547] kthread+0x3c5/0x780 [ 1188.908910][T11547] ? __pfx_kthread+0x10/0x10 [ 1188.908921][T11547] ? rcu_is_watching+0x12/0xc0 [ 1188.908935][T11547] ? __pfx_kthread+0x10/0x10 [ 1188.908947][T11547] ret_from_fork+0x675/0x7d0 [ 1188.908957][T11547] ? __pfx_kthread+0x10/0x10 [ 1188.908978][T11547] ret_from_fork_asm+0x1a/0x30 [ 1188.909005][T11547] [ 1188.909028][T11547] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1189.170759][T11547] Bluetooth: hci5: failed to register connection device [ 1189.199176][ T30] audit: type=1400 audit(1188.658:1361): avc: denied { setattr } for pid=18386 comm="syz.0.3138" name="[io_uring]" dev="anon_inodefs" ino=61526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1189.259350][ T30] audit: type=1400 audit(1188.718:1362): avc: denied { search } for pid=18389 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.298626][T18392] 9pnet_fd: Insufficient options for proto=fd [ 1189.360116][ T30] audit: type=1400 audit(1188.718:1363): avc: denied { search } for pid=18389 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.520765][ T30] audit: type=1400 audit(1188.718:1364): avc: denied { search } for pid=18389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.970597][ T30] audit: type=1400 audit(1188.718:1365): avc: denied { search } for pid=18389 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1190.176144][ T30] audit: type=1400 audit(1188.758:1366): avc: denied { mounton } for pid=18388 comm="syz.3.3139" path="/33" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1190.695582][ T30] audit: type=1400 audit(1188.818:1367): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.731073][ T30] audit: type=1400 audit(1188.818:1368): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.787374][ T30] audit: type=1400 audit(1188.818:1369): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.837585][ T30] audit: type=1400 audit(1188.898:1370): avc: denied { read } for pid=18390 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1190.870487][ T30] audit: type=1400 audit(1188.898:1371): avc: denied { open } for pid=18390 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1190.955621][ T30] audit: type=1400 audit(1188.898:1372): avc: denied { getattr } for pid=18390 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1190.991094][ T30] audit: type=1400 audit(1189.038:1373): avc: denied { read } for pid=18395 comm="syz.0.3140" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1191.027732][ T30] audit: type=1400 audit(1189.038:1374): avc: denied { open } for pid=18395 comm="syz.0.3140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1191.207700][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 1194.228888][T18376] geneve2: entered promiscuous mode [ 1194.234391][T18376] geneve2: entered allmulticast mode [ 1194.289561][T18412] team1: entered promiscuous mode [ 1194.295381][T18412] team1: entered allmulticast mode [ 1194.301943][T18412] 8021q: adding VLAN 0 to HW filter on device team1 [ 1194.650498][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.669100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.723003][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.734880][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.087216][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1195.152874][ T30] audit: type=1400 audit(1194.548:1437): avc: denied { create } for pid=18475 comm="syz.4.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.293646][ T5898] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1195.340553][ T30] audit: type=1400 audit(1194.548:1438): avc: denied { write } for pid=18475 comm="syz.4.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.571599][ T5898] usb 4-1: config 118 has an invalid interface number: 188 but max is 0 [ 1195.602274][ T5898] usb 4-1: config 118 has no interface number 0 [ 1195.608858][ T5898] usb 4-1: too many endpoints for config 118 interface 188 altsetting 59: 144, using maximum allowed: 30 [ 1195.669079][ T30] audit: type=1400 audit(1195.128:1439): avc: denied { map_read map_write } for pid=18486 comm="syz.1.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1195.689363][ T5898] usb 4-1: config 118 interface 188 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1195.689403][ T5898] usb 4-1: config 118 interface 188 has no altsetting 0 [ 1195.692179][ T5898] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1195.781354][ T30] audit: type=1400 audit(1195.188:1440): avc: denied { create } for pid=18481 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1195.805822][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.823659][ T5898] usb 4-1: Product: syz [ 1195.828002][ T5898] usb 4-1: Manufacturer: syz [ 1195.838144][ T5898] usb 4-1: SerialNumber: syz [ 1195.981188][ T5819] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1196.058087][ T30] audit: type=1400 audit(1195.478:1441): avc: denied { read } for pid=18495 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1196.089696][T11547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1196.101003][T11547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1196.113477][T11547] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1196.124622][T11547] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1196.133375][T11547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1196.142577][ T5898] usb 4-1: USB disconnect, device number 53 [ 1196.175997][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.234331][T18499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.246468][T18499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.262772][T18500] netlink: 'syz.1.3150': attribute type 16 has an invalid length. [ 1196.271839][T18500] netlink: 'syz.1.3150': attribute type 17 has an invalid length. [ 1196.314192][ T30] audit: type=1400 audit(1195.478:1442): avc: denied { open } for pid=18495 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1196.451555][ T5819] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1196.596961][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.640356][ T5922] IPVS: starting estimator thread 0... [ 1196.688720][T18500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1196.691757][ T5819] usb 5-1: Product: syz [ 1196.722088][ T30] audit: type=1400 audit(1195.498:1443): avc: denied { ioctl } for pid=18495 comm="syz-executor" path="socket:[61280]" dev="sockfs" ino=61280 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1196.823925][T18504] IPVS: using max 42 ests per chain, 100800 per kthread [ 1196.897044][ T5819] usb 5-1: Manufacturer: syz [ 1196.941196][ T5819] usb 5-1: SerialNumber: syz [ 1197.044222][ T30] audit: type=1400 audit(1195.548:1444): avc: denied { write } for pid=18470 comm="syz.3.3145" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1197.142392][ T30] audit: type=1400 audit(1195.618:1445): avc: denied { mounton } for pid=18495 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1197.161181][ T5819] usb 5-1: config 0 descriptor?? [ 1197.171296][ T30] audit: type=1400 audit(1195.648:1446): avc: denied { create } for pid=18494 comm="syz.2.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1198.242299][T11547] Bluetooth: hci4: command tx timeout [ 1198.765869][ T6188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.800703][ T6188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.119585][ T6188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.144079][ T6188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.275726][ T6188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.298682][ T6188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.829322][T18530] geneve2: entered promiscuous mode [ 1200.321173][ T5135] Bluetooth: hci4: command tx timeout [ 1200.347628][T18530] geneve2: entered allmulticast mode [ 1200.693582][ T6188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.724719][ T6188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.799417][T18495] chnl_net:caif_netlink_parms(): no params data found [ 1201.085586][ T977] usb 5-1: USB disconnect, device number 60 [ 1201.311956][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1201.311976][ T30] audit: type=1400 audit(1200.718:1462): avc: denied { execute } for pid=18543 comm="syz.3.3159" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1201.408871][ T30] audit: type=1400 audit(1200.728:1463): avc: denied { execute_no_trans } for pid=18543 comm="syz.3.3159" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1201.707583][ T30] audit: type=1400 audit(1201.138:1464): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1201.911749][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.927505][T18495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.868599][ T5135] Bluetooth: hci4: command 0x040f tx timeout [ 1202.870311][T18495] bridge_slave_0: entered allmulticast mode [ 1202.884589][T18495] bridge_slave_0: entered promiscuous mode [ 1202.921244][ T5819] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1203.348374][T18556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.432047][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.451407][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 1203.455010][ T30] audit: type=1400 audit(1202.908:1465): avc: denied { read write } for pid=18557 comm="syz.2.3162" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1203.457208][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.488059][ T5819] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1203.500288][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.527614][ T5819] usb 4-1: config 0 descriptor?? [ 1203.538698][T18495] bridge_slave_1: entered allmulticast mode [ 1203.666630][ T5819] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1203.680526][ T30] audit: type=1400 audit(1202.908:1466): avc: denied { open } for pid=18557 comm="syz.2.3162" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1203.705043][ T5819] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 1203.823441][T18495] bridge_slave_1: entered promiscuous mode [ 1203.944899][ T5819] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1204.007222][ T30] audit: type=1400 audit(1202.948:1467): avc: denied { ioctl } for pid=18557 comm="syz.2.3162" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1204.078995][ T5819] usb-storage 4-1:0.0: device ignored [ 1204.084844][ T30] audit: type=1400 audit(1202.958:1468): avc: denied { append } for pid=18557 comm="syz.2.3162" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1204.110892][ T30] audit: type=1400 audit(1203.108:1469): avc: denied { bind } for pid=18557 comm="syz.2.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1204.130819][ T30] audit: type=1400 audit(1203.118:1470): avc: denied { name_bind } for pid=18557 comm="syz.2.3162" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1204.153584][ T30] audit: type=1400 audit(1203.128:1471): avc: denied { node_bind } for pid=18557 comm="syz.2.3162" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1204.205228][ T6188] team0: left allmulticast mode [ 1204.212657][ T6188] team_slave_0: left allmulticast mode [ 1204.218326][ T6188] team_slave_1: left allmulticast mode [ 1204.241286][ T6188] dummy0: left allmulticast mode [ 1204.255137][ T6188] team0: left promiscuous mode [ 1204.269339][ T6188] team_slave_0: left promiscuous mode [ 1204.287240][ T6188] team_slave_1: left promiscuous mode [ 1204.366465][ T6188] dummy0: left promiscuous mode [ 1204.371772][ T6188] bridge0: port 3(team0) entered disabled state [ 1204.380786][ T6188] bridge_slave_1: left allmulticast mode [ 1204.391587][ T5819] usb 4-1: USB disconnect, device number 54 [ 1204.408095][ T6188] bridge_slave_1: left promiscuous mode [ 1204.415284][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.427829][ T6188] bridge_slave_0: left allmulticast mode [ 1205.052311][T18580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18580 comm=syz.3.3168 [ 1205.067193][T18580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18580 comm=syz.3.3168 [ 1205.081172][T18580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18580 comm=syz.3.3168 [ 1205.374889][ T5135] Bluetooth: hci4: command 0x040f tx timeout [ 1205.391709][ T5135] Bluetooth: hci1: command 0x0406 tx timeout [ 1205.427303][ T6188] bridge_slave_0: left promiscuous mode [ 1205.434914][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.637196][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1206.637215][ T30] audit: type=1400 audit(1205.658:1483): avc: denied { ioctl } for pid=18582 comm="syz.4.3169" path="socket:[61995]" dev="sockfs" ino=61995 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1206.706008][ T30] audit: type=1400 audit(1205.668:1484): avc: denied { read write } for pid=18582 comm="syz.4.3169" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1206.732039][ T30] audit: type=1400 audit(1205.668:1485): avc: denied { open } for pid=18582 comm="syz.4.3169" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1207.271878][T18591] 9pnet_fd: Insufficient options for proto=fd [ 1207.283481][ T30] audit: type=1400 audit(1206.728:1486): avc: denied { bind } for pid=18590 comm="syz.2.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1207.313489][ T30] audit: type=1400 audit(1206.728:1487): avc: denied { read write } for pid=18590 comm="syz.2.3171" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1207.355902][ T30] audit: type=1400 audit(1206.728:1488): avc: denied { open } for pid=18590 comm="syz.2.3171" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1207.380775][ T30] audit: type=1400 audit(1206.738:1489): avc: denied { write } for pid=18590 comm="syz.2.3171" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1207.404283][ T30] audit: type=1400 audit(1206.738:1490): avc: denied { open } for pid=18590 comm="syz.2.3171" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1207.443973][T18581] Bluetooth: hci4: command 0x040f tx timeout [ 1207.450346][ T30] audit: type=1400 audit(1206.808:1491): avc: denied { write } for pid=18590 comm="syz.2.3171" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1207.473830][ T30] audit: type=1400 audit(1206.818:1492): avc: denied { ioctl } for pid=18595 comm="syz.1.3174" path="socket:[62629]" dev="sockfs" ino=62629 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1207.852453][T18605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18605 comm=syz.4.3173 [ 1207.865616][T18605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18605 comm=syz.4.3173 [ 1207.878563][T18605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18605 comm=syz.4.3173 [ 1209.322199][T18615] qnx6: unable to set blocksize [ 1210.431083][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 1210.787507][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.829845][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.854114][ T6188] bond0 (unregistering): Released all slaves [ 1210.896505][T18495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.004196][T18603] geneve2: entered promiscuous mode [ 1211.014271][T18603] geneve2: entered allmulticast mode [ 1212.623718][T18495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.844263][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1212.844300][ T30] audit: type=1400 audit(1212.308:1498): avc: denied { read } for pid=18642 comm="syz.2.3180" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 1213.305189][ T30] audit: type=1400 audit(1212.768:1499): avc: denied { create } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1213.414969][ T30] audit: type=1400 audit(1212.788:1500): avc: denied { write } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1213.439194][ T30] audit: type=1400 audit(1212.798:1501): avc: denied { bind } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1213.470983][ T30] audit: type=1400 audit(1212.798:1502): avc: denied { write } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1213.471109][ T5868] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1213.500410][T18495] team0: Port device team_slave_0 added [ 1213.515870][T18495] team0: Port device team_slave_1 added [ 1213.530863][ T30] audit: type=1400 audit(1212.798:1503): avc: denied { setopt } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1213.573552][ T30] audit: type=1400 audit(1212.808:1504): avc: denied { read } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1213.618316][ T6188] hsr_slave_0: left promiscuous mode [ 1213.641460][ T30] audit: type=1400 audit(1212.818:1505): avc: denied { read } for pid=18653 comm="syz.3.3183" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1213.672504][ T6188] hsr_slave_1: left promiscuous mode [ 1213.685007][ T30] audit: type=1400 audit(1212.828:1506): avc: denied { open } for pid=18653 comm="syz.3.3183" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1213.721417][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 1213.738156][ T6188] veth1_macvtap: left promiscuous mode [ 1213.741663][ T5868] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1213.754054][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.762569][ T6188] veth0_macvtap: left allmulticast mode [ 1213.762609][ T6188] veth0_macvtap: left promiscuous mode [ 1213.776920][ T30] audit: type=1400 audit(1212.838:1507): avc: denied { getopt } for pid=18647 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1213.802849][ T5868] usb 3-1: config 0 descriptor?? [ 1213.916537][ T5868] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1213.926807][ T5868] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 1213.938712][ T5868] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1214.144033][ T5868] usb-storage 3-1:0.0: device ignored [ 1215.829770][ T5868] usb 3-1: USB disconnect, device number 63 [ 1216.888321][T18683] xt_hashlimit: size too large, truncated to 1048576 [ 1216.982054][T18686] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 1217.484500][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1217.984151][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 1218.061316][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 1218.540823][ T6188] team0 (unregistering): Port device dummy0 removed [ 1218.773657][T18687] C: renamed from lo (while UP) [ 1218.781758][T18687] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1218.896310][T18695] geneve2: entered promiscuous mode [ 1218.901551][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1218.901567][ T30] audit: type=1400 audit(1218.308:1517): avc: denied { read } for pid=18698 comm="syz.3.3193" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1218.901616][ T30] audit: type=1400 audit(1218.308:1518): avc: denied { open } for pid=18698 comm="syz.3.3193" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1218.954241][T18695] geneve2: entered allmulticast mode [ 1219.241814][ T30] audit: type=1400 audit(1218.318:1519): avc: denied { create } for pid=18698 comm="syz.3.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1219.264857][ T30] audit: type=1400 audit(1218.318:1520): avc: denied { ioctl } for pid=18698 comm="syz.3.3193" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1219.367211][ T30] audit: type=1400 audit(1218.558:1521): avc: denied { setopt } for pid=18698 comm="syz.3.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1219.414495][ T30] audit: type=1400 audit(1218.588:1522): avc: denied { ioctl } for pid=18698 comm="syz.3.3193" path="socket:[62187]" dev="sockfs" ino=62187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1219.577535][T18495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.593356][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.083113][T18495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.127381][T18495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.134491][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.168205][T18495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.478654][ T30] audit: type=1400 audit(1219.938:1523): avc: denied { create } for pid=18715 comm="syz.1.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1221.108733][T18495] hsr_slave_0: entered promiscuous mode [ 1221.133431][T18495] hsr_slave_1: entered promiscuous mode [ 1221.524236][T18495] debugfs: 'hsr0' already exists in 'hsr' [ 1221.530442][T18495] Cannot create hsr debugfs directory [ 1221.536609][ T30] audit: type=1400 audit(1220.668:1524): avc: denied { ioctl } for pid=18711 comm="syz.3.3197" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1221.561457][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.663348][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 1222.546931][T18724] team2: entered promiscuous mode [ 1222.566302][T18724] team2: entered allmulticast mode [ 1222.591572][T18724] 8021q: adding VLAN 0 to HW filter on device team2 [ 1222.711149][ T5875] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1223.380153][T16512] libceph: connect (1)[c::]:6789 error -101 [ 1223.390016][T16512] libceph: mon0 (1)[c::]:6789 connect error [ 1223.432286][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 1223.449217][T18742] ceph: No mds server is up or the cluster is laggy [ 1223.819812][ T5875] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1223.819840][T16512] libceph: connect (1)[c::]:6789 error -101 [ 1223.851347][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.880665][ T5875] usb 5-1: config 0 descriptor?? [ 1223.895382][ T5875] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1223.910780][T16512] libceph: mon0 (1)[c::]:6789 connect error [ 1223.981171][T18756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18756 comm=syz.2.3203 [ 1224.332369][ T5875] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 1224.340625][ T30] audit: type=1400 audit(1223.798:1525): avc: denied { setopt } for pid=18715 comm="syz.1.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1224.384126][ T30] audit: type=1400 audit(1223.848:1526): avc: denied { connect } for pid=18715 comm="syz.1.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1224.447845][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1224.468149][ T5875] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1224.482244][ T30] audit: type=1400 audit(1223.848:1527): avc: denied { write } for pid=18715 comm="syz.1.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1224.630468][ T5875] usb-storage 5-1:0.0: device ignored [ 1226.455834][ T5875] usb 5-1: USB disconnect, device number 61 [ 1226.521443][ T6188] bridge_slave_1: left allmulticast mode [ 1226.528707][ T6188] bridge_slave_1: left promiscuous mode [ 1226.536745][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1226.550537][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.563720][ T6188] bridge_slave_0: left allmulticast mode [ 1226.570814][ T6188] bridge_slave_0: left promiscuous mode [ 1226.577798][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.754909][ T6188] bond4 (unregistering): (slave gre1): Releasing backup interface [ 1227.763041][ T6188] gre1 (unregistering): left promiscuous mode [ 1227.991912][ T6188] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1228.008818][ T6188] geneve2 (unregistering): left promiscuous mode [ 1228.595471][ T6188] bond0 (unregistering): left promiscuous mode [ 1228.778293][ T6188] bond_slave_0: left promiscuous mode [ 1228.784950][ T6188] bond_slave_1: left promiscuous mode [ 1228.794443][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.813362][ T6188] bond_slave_0: left allmulticast mode [ 1228.836825][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.848876][ T6188] bond_slave_1: left allmulticast mode [ 1228.856323][ T6188] bond0 (unregistering): Released all slaves [ 1229.053151][ T6188] bond1 (unregistering): Released all slaves [ 1229.266070][ T6188] bond2 (unregistering): Released all slaves [ 1229.440468][ T6188] bond3 (unregistering): Released all slaves [ 1229.604523][ T6188] bond4 (unregistering): Released all slaves [ 1229.625778][T18776] team2: entered promiscuous mode [ 1229.631073][T18776] team2: entered allmulticast mode [ 1229.636573][T18776] 8021q: adding VLAN 0 to HW filter on device team2 [ 1229.754597][T18787] geneve2: entered promiscuous mode [ 1229.781089][T18787] geneve2: entered allmulticast mode [ 1229.895006][T18802] 9pnet_fd: Insufficient options for proto=fd [ 1230.074622][ T6188] 9: left promiscuous mode [ 1231.190663][ T30] audit: type=1400 audit(1230.628:1528): avc: denied { write } for pid=18814 comm="syz.3.3215" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1232.328244][ T6188] dummy0: left promiscuous mode [ 1232.421314][ T30] audit: type=1400 audit(1231.878:1529): avc: denied { bind } for pid=18832 comm="syz.3.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1232.520285][ T30] audit: type=1400 audit(1231.978:1530): avc: denied { create } for pid=18832 comm="syz.3.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1232.533305][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.591611][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.609905][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.621416][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.648942][ T30] audit: type=1400 audit(1232.048:1531): avc: denied { write } for pid=18832 comm="syz.3.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1232.708111][ T30] audit: type=1400 audit(1232.058:1532): avc: denied { connect } for pid=18832 comm="syz.3.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1232.757155][ T6188] veth1_macvtap: left promiscuous mode [ 1232.774429][ T6188] veth0_macvtap: left promiscuous mode [ 1232.803533][ T6188] veth1_vlan: left promiscuous mode [ 1232.823288][ T6188] veth0_vlan: left promiscuous mode [ 1235.957272][ T6188] team0 (unregistering): Port device team_slave_1 removed [ 1236.142737][T18855] xt_hashlimit: max too large, truncated to 1048576 [ 1236.149705][T18855] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1236.236651][T18856] input: syz0 as /devices/virtual/input/input29 [ 1236.594013][ T30] audit: type=1400 audit(1235.988:1533): avc: denied { read } for pid=5169 comm="acpid" name="js0" dev="devtmpfs" ino=3925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1236.619658][ T30] audit: type=1400 audit(1236.038:1534): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1236.652801][T18581] Bluetooth: hci5: command 0x0405 tx timeout [ 1236.664160][ T30] audit: type=1400 audit(1236.038:1535): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1236.770268][ T6188] team0 (unregistering): Port device team_slave_0 removed [ 1236.788705][T18858] 9pnet_fd: Insufficient options for proto=fd [ 1237.414429][T18863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.414982][ T30] audit: type=1400 audit(1236.868:1536): avc: denied { write } for pid=18862 comm="syz.4.3226" name="dev" dev="proc" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1237.450028][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1237.462509][T18863] openvswitch: netlink: Flow actions attr not present in new flow. [ 1237.760514][T18495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1237.770699][T18495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1237.788198][T18844] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1237.875936][T18495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1237.896951][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1237.906608][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1237.929056][T18495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1237.963673][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1238.636760][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1238.722118][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1238.741156][T18870] ceph: No mds server is up or the cluster is laggy [ 1239.131392][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.172223][T18495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.233500][T18495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.358129][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.365493][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.373639][ T5875] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1241.565625][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.572831][T12711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.601688][ T5875] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 1241.611106][ T5819] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1241.616507][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.686343][T18914] NILFS (nbd3): device size too small [ 1242.089008][ T5875] usb 3-1: Product: syz [ 1242.093510][ T5875] usb 3-1: Manufacturer: syz [ 1242.098230][ T5875] usb 3-1: SerialNumber: syz [ 1242.113125][ T5875] usb 3-1: config 0 descriptor?? [ 1242.250806][ T5875] usb 3-1: can't set config #0, error -71 [ 1242.269229][T18495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1242.329853][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 1242.357013][ T5875] usb 3-1: USB disconnect, device number 64 [ 1242.395753][T18923] 9pnet_fd: Insufficient options for proto=fd [ 1242.411249][T18495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.687763][ T5819] usb 5-1: device descriptor read/all, error -71 [ 1243.903148][T18945] No control pipe specified [ 1244.018951][ T30] audit: type=1400 audit(1243.368:1537): avc: denied { accept } for pid=18934 comm="syz.2.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1245.499980][T18495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.592811][T18961] xt_hashlimit: max too large, truncated to 1048576 [ 1245.606266][T18961] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1246.133602][T18495] veth0_vlan: entered promiscuous mode [ 1246.148280][T18495] veth1_vlan: entered promiscuous mode [ 1246.552604][T18966] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 1246.602782][ T30] audit: type=1400 audit(1246.008:1538): avc: denied { relabelfrom } for pid=18955 comm="syz.4.3241" name="UNIX" dev="sockfs" ino=63250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1246.950015][ T30] audit: type=1400 audit(1246.018:1539): avc: denied { mac_admin } for pid=18955 comm="syz.4.3241" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1246.974676][ T30] audit: type=1400 audit(1246.028:1540): avc: denied { relabelto } for pid=18955 comm="syz.4.3241" name="UNIX" dev="sockfs" ino=63250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1246.995853][T18495] veth0_macvtap: entered promiscuous mode [ 1247.051105][ T30] audit: type=1400 audit(1246.058:1541): avc: denied { getopt } for pid=18955 comm="syz.4.3241" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1247.173079][T18495] veth1_macvtap: entered promiscuous mode [ 1248.196047][T18495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.245405][T18495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.267840][ T2965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.700836][ T2965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.720524][T18974] fuse: Unknown parameter 'fEA_U ' [ 1248.727314][ T6111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.774570][ T6111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.163402][ T30] audit: type=1400 audit(1248.608:1542): avc: denied { mount } for pid=18979 comm="syz.3.3245" name="/" dev="ramfs" ino=63800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1249.567044][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.582779][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.620779][ T30] audit: type=1400 audit(1248.628:1543): avc: denied { unmount } for pid=18979 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1249.687907][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 1249.702838][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 1249.788919][T18989] ceph: No mds server is up or the cluster is laggy [ 1249.976611][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 1250.024155][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1250.038274][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.111621][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.078282][ T30] audit: type=1400 audit(1250.538:1544): avc: denied { name_bind } for pid=19005 comm="syz.0.3147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1252.239319][ T30] audit: type=1400 audit(1251.698:1545): avc: denied { create } for pid=19020 comm="syz.4.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1252.512564][ T5819] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1252.630050][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1252.651897][ T5922] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1252.655304][T19029] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 1252.684614][ T5819] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1252.694156][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.731284][ T5819] usb 5-1: config 0 descriptor?? [ 1252.766732][ T5819] cp210x 5-1:0.0: cp210x converter detected [ 1252.823674][ T5922] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1253.000685][ T5819] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1253.013890][T19027] team2: entered promiscuous mode [ 1253.021424][T19027] team2: entered allmulticast mode [ 1253.022804][ T5922] usb 1-1: config 0 has no interface number 0 [ 1253.036097][ T5819] cp210x 5-1:0.0: querying part number failed [ 1253.045224][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1253.061264][ T5819] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1253.081097][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.093283][ T5922] usb 1-1: Product: syz [ 1253.606554][ T5819] usb 5-1: USB disconnect, device number 64 [ 1253.613018][ T5922] usb 1-1: Manufacturer: syz [ 1253.618257][T19027] 8021q: adding VLAN 0 to HW filter on device team2 [ 1253.627093][ T5922] usb 1-1: SerialNumber: syz [ 1254.073711][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1254.085354][ T5819] cp210x 5-1:0.0: device disconnected [ 1254.092983][ T5922] usb 1-1: config 0 descriptor?? [ 1255.040111][ T5922] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1255.061370][ T5922] uvcvideo 1-1:0.64: No valid video chain found. [ 1255.096322][ T5922] usb 1-1: USB disconnect, device number 85 [ 1255.215573][T19043] netlink: 'syz.1.3259': attribute type 21 has an invalid length. [ 1255.237850][ T30] audit: type=1400 audit(1254.678:1546): avc: denied { create } for pid=19037 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1255.260959][T19043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1255.278060][T19043] netlink: 'syz.1.3259': attribute type 4 has an invalid length. [ 1255.295370][T19043] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1255.334375][T19046] batadv3: entered promiscuous mode [ 1255.351687][T19046] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1256.355404][T19054] Device name cannot be null; rc = [-22] [ 1256.411186][ T30] audit: type=1400 audit(1255.838:1547): avc: denied { remount } for pid=19051 comm="syz.2.3261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1256.441182][ T30] audit: type=1400 audit(1255.848:1548): avc: denied { listen } for pid=19051 comm="syz.2.3261" lport=40464 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1257.601474][ T30] audit: type=1400 audit(1255.848:1549): avc: denied { accept } for pid=19051 comm="syz.2.3261" lport=40464 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1258.601199][ T30] audit: type=1400 audit(1255.858:1550): avc: denied { write } for pid=19051 comm="syz.2.3261" lport=40464 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1258.861107][ T30] audit: type=1400 audit(1255.858:1551): avc: denied { setopt } for pid=19051 comm="syz.2.3261" lport=40464 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1258.892344][ T30] audit: type=1400 audit(1255.868:1552): avc: denied { mount } for pid=19051 comm="syz.2.3261" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1260.317665][ T1207] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1261.276519][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 1261.294828][ T1207] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1261.321376][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.399894][T19084] team1: entered promiscuous mode [ 1261.405448][T19084] team1: entered allmulticast mode [ 1261.414912][T19084] 8021q: adding VLAN 0 to HW filter on device team1 [ 1261.498291][ T1207] usb 5-1: config 0 descriptor?? [ 1261.528730][ T1207] cp210x 5-1:0.0: cp210x converter detected [ 1261.728317][ T1207] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1261.771816][ T1207] cp210x 5-1:0.0: querying part number failed [ 1261.807546][ T1207] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1261.839253][ T1207] usb 5-1: USB disconnect, device number 65 [ 1261.878841][ T1207] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1261.944840][ T1207] cp210x 5-1:0.0: device disconnected [ 1262.552429][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 1262.560493][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 1262.664302][T19091] ceph: No mds server is up or the cluster is laggy [ 1264.749748][T19113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.117714][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 1265.158570][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 1265.170337][T19113] openvswitch: netlink: Flow actions attr not present in new flow. [ 1265.178277][T19117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.419823][ T30] audit: type=1400 audit(1264.878:1553): avc: denied { name_connect } for pid=19126 comm="syz.1.3279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1265.439723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.481755][ T30] audit: type=1400 audit(1265.838:1554): avc: denied { read } for pid=19138 comm="syz.2.3282" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1266.506418][ T30] audit: type=1400 audit(1265.848:1555): avc: denied { open } for pid=19138 comm="syz.2.3282" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1266.530435][ T30] audit: type=1400 audit(1265.888:1556): avc: denied { ioctl } for pid=19138 comm="syz.2.3282" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1266.747368][T19144] serio: Serial port ptm0 [ 1266.845729][T17464] Bluetooth: hci0: command 0x041b tx timeout [ 1266.915821][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3284'. [ 1267.071384][T18967] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1267.649273][T18967] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1267.667105][T18967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.697815][T18967] usb 5-1: config 0 descriptor?? [ 1267.713386][T18967] cp210x 5-1:0.0: cp210x converter detected [ 1267.773197][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1267.786536][ T30] audit: type=1400 audit(1267.248:1557): avc: denied { watch_mount } for pid=19161 comm="syz.1.3290" path="/76" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1267.808485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.854323][ T30] audit: type=1400 audit(1267.288:1558): avc: denied { watch watch_reads } for pid=19161 comm="syz.1.3290" path="/76" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1267.915510][T19162] team1: entered promiscuous mode [ 1267.924536][T19162] team1: entered allmulticast mode [ 1267.938907][T19162] 8021q: adding VLAN 0 to HW filter on device team1 [ 1268.127084][T18967] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1268.145875][T18967] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1268.154654][T18967] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1268.190446][T18967] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1268.201855][T18967] usb 5-1: USB disconnect, device number 66 [ 1268.235389][T18967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1268.260446][T18967] cp210x 5-1:0.0: device disconnected [ 1270.028662][T19178] input: syz1 as /devices/virtual/input/input30 [ 1270.154821][ T30] audit: type=1400 audit(1269.618:1559): avc: denied { append } for pid=19177 comm="syz.3.3295" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1270.612736][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 1270.810806][T19180] team3: entered promiscuous mode [ 1270.816192][T19180] team3: entered allmulticast mode [ 1270.823077][T19180] 8021q: adding VLAN 0 to HW filter on device team3 [ 1271.814521][ T30] audit: type=1400 audit(1271.278:1560): avc: denied { module_load } for pid=19192 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1272.098175][T19207] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1272.111480][T16512] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1272.731253][ T30] audit: type=1400 audit(1271.608:1561): avc: denied { mount } for pid=19202 comm="syz.4.3303" name="/" dev="rpc_pipefs" ino=64126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1272.782531][ T30] audit: type=1400 audit(1272.248:1562): avc: denied { read } for pid=19205 comm="syz.3.3304" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1272.806602][T19210] binder: 19205:19210 ioctl c018620c 2000000001c0 returned -1 [ 1272.826639][T19210] syzkaller0: entered promiscuous mode [ 1272.832518][ T30] audit: type=1400 audit(1272.268:1563): avc: denied { open } for pid=19205 comm="syz.3.3304" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1272.858208][T19210] syzkaller0: entered allmulticast mode [ 1272.933004][T16512] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1273.435915][T16512] usb 3-1: not running at top speed; connect to a high speed hub [ 1273.442322][ T30] audit: type=1400 audit(1272.268:1564): avc: denied { ioctl } for pid=19205 comm="syz.3.3304" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1273.447105][T16512] usb 3-1: config 3 has an invalid interface number: 112 but max is 1 [ 1273.472058][T19212] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1273.489471][T16512] usb 3-1: config 3 has an invalid interface number: 96 but max is 1 [ 1274.065745][T19216] fuse: Unknown parameter 'fEA_U ' [ 1274.143337][ T30] audit: type=1400 audit(1273.608:1565): avc: denied { ioctl } for pid=19215 comm="syz.4.3307" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1274.341853][T16512] usb 3-1: config 3 has no interface number 0 [ 1274.349914][T16512] usb 3-1: config 3 has no interface number 1 [ 1274.356181][T16512] usb 3-1: config 3 interface 112 has no altsetting 0 [ 1274.363285][T16512] usb 3-1: config 3 interface 96 has no altsetting 0 [ 1274.381070][T16512] usb 3-1: string descriptor 0 read error: -71 [ 1274.388644][T16512] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=91.29 [ 1274.412261][T16512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.431988][T16512] usb 3-1: can't set config #3, error -71 [ 1274.447993][T16512] usb 3-1: USB disconnect, device number 65 [ 1274.931239][ T30] audit: type=1400 audit(1274.388:1566): avc: denied { write } for pid=19220 comm="syz.0.3310" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1275.075499][T19233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1275.115177][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1275.142734][T19233] openvswitch: netlink: Flow actions attr not present in new flow. [ 1275.174332][T19235] pim6reg1: entered promiscuous mode [ 1275.179655][T19235] pim6reg1: entered allmulticast mode [ 1276.294096][ T30] audit: type=1400 audit(1275.758:1567): avc: denied { create } for pid=19253 comm="syz.0.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1276.345901][ T30] audit: type=1400 audit(1275.788:1568): avc: denied { getopt } for pid=19253 comm="syz.0.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1276.351089][ T977] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1276.374407][ T30] audit: type=1400 audit(1275.788:1569): avc: denied { listen } for pid=19253 comm="syz.0.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1276.436431][T19256] geneve2: entered promiscuous mode [ 1276.444673][T19256] geneve2: entered allmulticast mode [ 1276.487377][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1276.505271][T19260] team4: entered promiscuous mode [ 1276.510336][T19260] team4: entered allmulticast mode [ 1276.515808][T19260] 8021q: adding VLAN 0 to HW filter on device team4 [ 1276.674943][ T977] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1276.683234][ T977] usb 4-1: config 0 has no interface number 0 [ 1276.695729][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1276.706231][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.714618][ T977] usb 4-1: Product: syz [ 1276.724285][ T977] usb 4-1: Manufacturer: syz [ 1276.733321][T19265] fuse: Unknown parameter '0x0000000000000008' [ 1276.751311][ T977] usb 4-1: SerialNumber: syz [ 1276.790283][ T977] usb 4-1: config 0 descriptor?? [ 1278.518810][T18581] Bluetooth: hci4: command 0x040f tx timeout [ 1278.759581][ T977] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1278.768850][ T977] uvcvideo 4-1:0.64: No valid video chain found. [ 1279.269373][ T977] usb 4-1: USB disconnect, device number 55 [ 1279.413573][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1279.413585][ T30] audit: type=1400 audit(1278.878:1571): avc: denied { create } for pid=19287 comm="syz.0.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1279.715316][T19294] FAULT_INJECTION: forcing a failure. [ 1279.715316][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.728197][T19294] CPU: 1 UID: 0 PID: 19294 Comm: syz.2.3328 Not tainted syzkaller #0 PREEMPT(full) [ 1279.728228][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1279.728241][T19294] Call Trace: [ 1279.728249][T19294] [ 1279.728257][T19294] dump_stack_lvl+0x16c/0x1f0 [ 1279.728292][T19294] should_fail_ex+0x512/0x640 [ 1279.728316][T19294] ? fs_reclaim_acquire+0xae/0x150 [ 1279.728343][T19294] should_failslab+0xc2/0x120 [ 1279.728367][T19294] __kmalloc_noprof+0xdd/0x880 [ 1279.728403][T19294] ? tomoyo_encode2+0x100/0x3e0 [ 1279.728432][T19294] ? tomoyo_encode2+0x100/0x3e0 [ 1279.728453][T19294] tomoyo_encode2+0x100/0x3e0 [ 1279.728480][T19294] tomoyo_encode+0x29/0x50 [ 1279.728503][T19294] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1279.728540][T19294] tomoyo_path_number_perm+0x245/0x580 [ 1279.728571][T19294] ? tomoyo_path_number_perm+0x237/0x580 [ 1279.728606][T19294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1279.728671][T19294] ? hook_file_ioctl_common+0x145/0x410 [ 1279.728701][T19294] ? __rcu_read_unlock+0x2bc/0x550 [ 1279.728727][T19294] ? __fget_files+0x20e/0x3c0 [ 1279.728753][T19294] security_file_ioctl+0x9b/0x240 [ 1279.728778][T19294] __x64_sys_ioctl+0xb7/0x210 [ 1279.728810][T19294] do_syscall_64+0xcd/0xfa0 [ 1279.728841][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.728863][T19294] RIP: 0033:0x7fbf6558efc9 [ 1279.728881][T19294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.728901][T19294] RSP: 002b:00007fbf663b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.728921][T19294] RAX: ffffffffffffffda RBX: 00007fbf657e6180 RCX: 00007fbf6558efc9 [ 1279.728937][T19294] RDX: 0000200000000040 RSI: 0000000000003b83 RDI: 0000000000000005 [ 1279.728951][T19294] RBP: 00007fbf663b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.728964][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.728977][T19294] R13: 00007fbf657e6218 R14: 00007fbf657e6180 R15: 00007ffe4ece3d88 [ 1279.729014][T19294] [ 1279.729128][T19294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.842756][T19305] NILFS (nbd2): device size too small [ 1282.593508][T17464] Bluetooth: hci3: command 0x0405 tx timeout [ 1282.980774][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1282.994792][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1283.142716][T19315] ceph: No mds server is up or the cluster is laggy [ 1283.301328][ T5819] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1283.311934][T19332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1283.329727][T19332] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1283.353581][T19332] netlink: 'syz.0.3336': attribute type 6 has an invalid length. [ 1283.391224][T19332] netlink: 'syz.0.3336': attribute type 5 has an invalid length. [ 1283.422728][T19332] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1283.491717][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1283.507758][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1283.561836][ T5819] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1283.601120][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1283.657666][ T5819] usb 5-1: Product: syz [ 1283.676678][ T5819] usb 5-1: Manufacturer: syz [ 1283.699081][ T5819] usb 5-1: SerialNumber: syz [ 1283.736206][ T5819] usb 5-1: config 0 descriptor?? [ 1283.769238][T19331] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1283.784800][T19341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1283.877249][T19341] openvswitch: netlink: Flow actions attr not present in new flow. [ 1284.363502][ T30] audit: type=1400 audit(1283.828:1572): avc: denied { create } for pid=19344 comm="syz.0.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1284.384803][ T5875] usb 5-1: USB disconnect, device number 67 [ 1285.689441][ T30] audit: type=1400 audit(1285.148:1573): avc: denied { create } for pid=19354 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1286.758346][T19368] geneve2: entered promiscuous mode [ 1286.763781][T19368] geneve2: entered allmulticast mode [ 1291.016091][ T30] audit: type=1400 audit(1290.438:1574): avc: denied { ioctl } for pid=19404 comm="syz.1.3355" path="socket:[65312]" dev="sockfs" ino=65312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1291.044977][T18581] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1291.177360][T19410] raw_sendmsg: syz.1.3357 forgot to set AF_INET. Fix it! [ 1291.226600][T18967] libceph: connect (1)[c::]:6789 error -101 [ 1291.234108][T18967] libceph: mon0 (1)[c::]:6789 connect error [ 1291.240413][T18967] libceph: connect (1)[c::]:6789 error -101 [ 1291.241084][T16512] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1291.251292][T18967] libceph: mon0 (1)[c::]:6789 connect error [ 1291.414286][ T30] audit: type=1400 audit(1290.878:1575): avc: denied { ioctl } for pid=19415 comm="syz.0.3356" path="socket:[65554]" dev="sockfs" ino=65554 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1291.516569][T16512] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1291.637962][T18967] libceph: connect (1)[c::]:6789 error -101 [ 1291.644585][T16512] usb 5-1: config 0 has no interface number 0 [ 1291.644981][T18967] libceph: mon0 (1)[c::]:6789 connect error [ 1291.653952][T16512] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1291.657048][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1291.666109][T16512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.681376][T16512] usb 5-1: Product: syz [ 1291.694494][T16512] usb 5-1: Manufacturer: syz [ 1291.707416][T16512] usb 5-1: SerialNumber: syz [ 1291.809970][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1291.828904][T16512] usb 5-1: config 0 descriptor?? [ 1292.009088][T19408] ceph: No mds server is up or the cluster is laggy [ 1292.016039][T19409] ceph: No mds server is up or the cluster is laggy [ 1292.122645][T19423] qnx6: unable to read the first superblock [ 1292.128843][T19423] qnx6: unable to read the first superblock [ 1292.134919][T19423] qnx6: unable to read the first superblock [ 1292.173312][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1292.179452][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1292.681531][T19425] ceph: No mds server is up or the cluster is laggy [ 1292.688883][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1292.711665][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1293.572110][T16512] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1293.579717][T16512] uvcvideo 5-1:0.64: No valid video chain found. [ 1293.650566][ T30] audit: type=1400 audit(1293.058:1576): avc: denied { connect } for pid=19435 comm="syz.2.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1293.749511][T16512] usb 5-1: USB disconnect, device number 68 [ 1293.971071][ T977] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1294.077115][T19445] fuse: Unknown parameter 'fEA_U ' [ 1294.123553][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 1294.245718][ T977] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1294.267816][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.283156][ T977] usb 1-1: config 0 descriptor?? [ 1294.452806][T19451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19451 comm=syz.2.3364 [ 1294.466248][T19451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19451 comm=syz.2.3364 [ 1294.479617][T19451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19451 comm=syz.2.3364 [ 1295.796977][T19459] geneve2: entered promiscuous mode [ 1295.802321][T19459] geneve2: entered allmulticast mode [ 1296.161517][ T30] audit: type=1400 audit(1295.628:1577): avc: denied { read } for pid=19470 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1297.059466][T19467] geneve2: entered promiscuous mode [ 1297.101276][T19467] geneve2: entered allmulticast mode [ 1297.142785][ T977] usb 1-1: can't set config #0, error -71 [ 1297.157772][ T977] usb 1-1: USB disconnect, device number 86 [ 1297.797891][T16512] libceph: connect (1)[c::]:6789 error -101 [ 1297.804265][T16512] libceph: mon0 (1)[c::]:6789 connect error [ 1298.386440][T16512] libceph: connect (1)[c::]:6789 error -101 [ 1298.392912][T16512] libceph: mon0 (1)[c::]:6789 connect error [ 1298.562798][T19487] ceph: No mds server is up or the cluster is laggy [ 1298.725475][ T30] audit: type=1400 audit(1298.168:1578): avc: denied { open } for pid=19494 comm="syz.0.3373" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1298.881979][ T30] audit: type=1400 audit(1298.298:1579): avc: denied { create } for pid=19494 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1298.934491][T19497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.266945][ T30] audit: type=1400 audit(1298.388:1580): avc: denied { connect } for pid=19494 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1299.386354][ T30] audit: type=1400 audit(1298.848:1581): avc: denied { bind } for pid=19498 comm="syz.3.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1299.604176][ T30] audit: type=1400 audit(1298.878:1582): avc: denied { connect } for pid=19498 comm="syz.3.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1299.728089][ T30] audit: type=1400 audit(1298.878:1583): avc: denied { listen } for pid=19498 comm="syz.3.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1299.808935][ T30] audit: type=1400 audit(1298.888:1584): avc: denied { accept } for pid=19498 comm="syz.3.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1299.854642][T19503] fuse: Unknown parameter 'fEA_U ' [ 1300.549482][ T30] audit: type=1400 audit(1299.098:1585): avc: denied { unlink } for pid=19494 comm="syz.0.3373" name="#12" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1300.593372][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.631239][ T30] audit: type=1400 audit(1299.098:1586): avc: denied { mount } for pid=19494 comm="syz.0.3373" name="/" dev="overlay" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1301.081431][T18967] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1301.290583][T18967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1301.431127][T19530] sp0: Synchronizing with TNC [ 1301.767778][T18967] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1302.438859][T18967] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1303.130077][T18967] usb 1-1: Product: syz [ 1303.134521][T18967] usb 1-1: Manufacturer: syz [ 1303.139256][T18967] usb 1-1: SerialNumber: syz [ 1303.159948][T18967] usb 1-1: config 0 descriptor?? [ 1303.181369][T19515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1303.190487][T18967] hub 1-1:0.0: bad descriptor, ignoring hub [ 1303.253692][T18967] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1303.935091][ T5819] usb 1-1: USB disconnect, device number 87 [ 1304.413844][T19545] geneve2: entered promiscuous mode [ 1304.419221][T19545] geneve2: entered allmulticast mode [ 1306.459710][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1306.508627][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1306.523831][T19556] netlink: 'syz.0.3391': attribute type 12 has an invalid length. [ 1306.533873][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1306.539454][T19565] fuse: Unknown parameter 'fEA_U ' [ 1308.939339][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1308.939357][ T30] audit: type=1400 audit(1308.398:1588): avc: denied { connect } for pid=19588 comm="syz.1.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1309.042710][ T30] audit: type=1400 audit(1308.398:1589): avc: denied { setopt } for pid=19588 comm="syz.1.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1309.062486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.070869][ T30] audit: type=1400 audit(1308.398:1590): avc: denied { read } for pid=19588 comm="syz.1.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1309.096263][ T30] audit: type=1400 audit(1308.448:1591): avc: denied { create } for pid=19588 comm="syz.1.3401" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1309.186445][ T30] audit: type=1400 audit(1308.648:1592): avc: denied { setopt } for pid=19594 comm="syz.4.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1309.376469][ T30] audit: type=1400 audit(1308.838:1593): avc: denied { unlink } for pid=17090 comm="syz-executor" name="file2" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1309.398648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.455269][ T30] audit: type=1326 audit(1308.868:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cad8efc9 code=0x7fc00000 [ 1309.571094][ T977] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1309.731100][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 1309.932164][ T30] audit: type=1326 audit(1308.868:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54cad8efc9 code=0x7fc00000 [ 1310.401051][ T977] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1310.409243][ T977] usb 5-1: config 0 has no interface number 0 [ 1310.411186][ T30] audit: type=1326 audit(1308.868:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cad8efc9 code=0x7fc00000 [ 1310.440089][ T30] audit: type=1326 audit(1308.868:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19577 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cad8efc9 code=0x7fc00000 [ 1310.463050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.574079][ T977] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1310.586219][ T977] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1310.602419][ T977] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1310.611709][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.619764][ T977] usb 5-1: Product: syz [ 1310.624351][ T977] usb 5-1: Manufacturer: syz [ 1310.628947][ T977] usb 5-1: SerialNumber: syz [ 1310.635934][ T977] usb 5-1: config 0 descriptor?? [ 1310.999575][T19604] geneve2: entered promiscuous mode [ 1311.011327][T19604] geneve2: entered allmulticast mode [ 1311.455359][ T977] usb 5-1: USB disconnect, device number 69 [ 1311.499610][T19611] udevd[19611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.599413][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 1311.618049][T19619] team5: entered promiscuous mode [ 1311.623131][T19619] team5: entered allmulticast mode [ 1311.628483][T19619] 8021q: adding VLAN 0 to HW filter on device team5 [ 1311.825396][T19624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1311.844839][T19624] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1312.081771][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1312.092073][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1313.768336][T19643] fuse: Unknown parameter 'fEA_U0x0000000000000008' [ 1314.686411][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1315.104814][T19649] team2: entered promiscuous mode [ 1315.109864][T19649] team2: entered allmulticast mode [ 1315.146364][T19649] 8021q: adding VLAN 0 to HW filter on device team2 [ 1315.333311][T19665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19665 comm=syz.1.3424 [ 1315.583052][T19670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1315.619657][T19670] overlayfs: missing 'lowerdir' [ 1316.043901][T19684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19684 comm=syz.0.3428 [ 1316.056874][T19684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19684 comm=syz.0.3428 [ 1316.070396][T19684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19684 comm=syz.0.3428 [ 1317.160539][T19679] geneve2: entered promiscuous mode [ 1317.205159][T19679] geneve2: entered allmulticast mode [ 1319.775693][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1319.971653][T19702] team2: entered promiscuous mode [ 1319.976780][T19702] team2: entered allmulticast mode [ 1319.985485][T19702] 8021q: adding VLAN 0 to HW filter on device team2 [ 1320.329544][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1320.572964][T19709] team3: entered promiscuous mode [ 1320.578045][T19709] team3: entered allmulticast mode [ 1320.602226][T19709] 8021q: adding VLAN 0 to HW filter on device team3 [ 1321.134033][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1321.134046][ T30] audit: type=1400 audit(1320.588:1667): avc: denied { firmware_load } for pid=19712 comm="syz.2.3437" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1321.277586][ T30] audit: type=1400 audit(1320.588:1668): avc: denied { ioctl } for pid=19712 comm="syz.2.3437" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1322.745412][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1322.934536][T19746] team3: entered promiscuous mode [ 1322.940089][T19746] team3: entered allmulticast mode [ 1322.950147][T19746] 8021q: adding VLAN 0 to HW filter on device team3 [ 1323.074596][T19748] geneve2: entered promiscuous mode [ 1323.080132][T19748] geneve2: entered allmulticast mode [ 1324.098148][ T1207] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1324.262714][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.274695][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.498454][ T1207] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1325.202102][ T1207] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1325.231323][ T1207] usb 4-1: Manufacturer: syz [ 1325.284838][ T1207] usb 4-1: config 0 descriptor?? [ 1325.422374][T19773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.492416][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'. [ 1325.501859][T19773] openvswitch: netlink: Flow actions attr not present in new flow. [ 1325.605324][T19778] overlayfs: failed to clone upperpath [ 1326.800386][ T30] audit: type=1400 audit(1326.258:1669): avc: denied { create } for pid=19785 comm="syz.2.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1326.886822][ T1207] usbhid 4-1:0.0: can't add hid device: -71 [ 1326.905136][ T1207] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1326.960269][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1326.977901][T19794] team6: entered promiscuous mode [ 1326.983046][T19794] team6: entered allmulticast mode [ 1326.988373][T19794] 8021q: adding VLAN 0 to HW filter on device team6 [ 1327.009573][ T30] audit: type=1400 audit(1326.378:1670): avc: denied { create } for pid=19785 comm="syz.2.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1327.097696][ T1207] usb 4-1: USB disconnect, device number 56 [ 1327.195026][ T30] audit: type=1400 audit(1326.658:1671): avc: denied { create } for pid=19797 comm="syz.2.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1327.228701][T19800] overlayfs: missing 'workdir' [ 1327.235099][ T30] audit: type=1400 audit(1326.678:1672): avc: denied { ioctl } for pid=19797 comm="syz.2.3463" path="socket:[66962]" dev="sockfs" ino=66962 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1327.261717][ T30] audit: type=1400 audit(1326.678:1673): avc: denied { bind } for pid=19797 comm="syz.2.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1327.287248][T19805] netlink: 'syz.2.3463': attribute type 6 has an invalid length. [ 1327.351647][ T30] audit: type=1400 audit(1326.768:1674): avc: denied { write } for pid=19797 comm="syz.2.3463" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1327.556201][T19807] NILFS (nbd0): device size too small [ 1327.932886][ T30] audit: type=1400 audit(1326.768:1675): avc: denied { bind } for pid=19797 comm="syz.2.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1329.049874][T19825] NILFS (nbd2): device size too small [ 1329.526212][T19830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.614069][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1329.697764][T19830] openvswitch: netlink: Flow actions attr not present in new flow. [ 1329.723056][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1329.783429][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1329.867006][T19833] ceph: No mds server is up or the cluster is laggy [ 1330.219035][T19851] geneve2: entered promiscuous mode [ 1330.224527][T19851] geneve2: entered allmulticast mode [ 1331.272131][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1331.556601][T19859] team7: entered promiscuous mode [ 1331.561688][T19859] team7: entered allmulticast mode [ 1331.567045][T19859] 8021q: adding VLAN 0 to HW filter on device team7 [ 1331.651050][ T5868] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1331.822104][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 1331.833229][ T5868] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1331.853240][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.909931][ T30] audit: type=1400 audit(1331.368:1676): avc: denied { ioctl } for pid=19869 comm="syz.4.3480" path="socket:[67053]" dev="sockfs" ino=67053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1331.961976][ T5868] usb 4-1: config 0 descriptor?? [ 1332.050658][ T5868] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1332.088216][ T30] audit: type=1400 audit(1331.368:1677): avc: denied { create } for pid=19869 comm="syz.4.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1332.143555][ T30] audit: type=1400 audit(1331.368:1678): avc: denied { ioctl } for pid=19869 comm="syz.4.3480" path="socket:[67060]" dev="sockfs" ino=67060 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1332.300616][ T5868] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 1332.382371][ T5868] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1332.459471][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.480808][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1332.495701][T19882] openvswitch: netlink: Flow actions attr not present in new flow. [ 1332.496197][ T5868] usb-storage 4-1:0.0: device ignored [ 1332.666672][ T30] audit: type=1400 audit(1332.128:1679): avc: denied { mount } for pid=19888 comm="syz.0.3486" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1332.780184][ T30] audit: type=1400 audit(1332.128:1680): avc: denied { mounton } for pid=19888 comm="syz.0.3486" path="/49/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1332.815720][ T30] audit: type=1400 audit(1332.158:1681): avc: denied { remount } for pid=19888 comm="syz.0.3486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1332.944895][ T30] audit: type=1400 audit(1332.178:1682): avc: denied { unmount } for pid=18495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1333.080532][T19895] fuse: Unknown parameter 'fEA_U ' [ 1333.358023][ T30] audit: type=1400 audit(1332.758:1683): avc: denied { map } for pid=19897 comm="syz.4.3489" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1333.401128][ T1207] usb 4-1: USB disconnect, device number 57 [ 1333.667653][T19905] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1334.518607][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1334.652963][T19915] team3: entered promiscuous mode [ 1334.658171][T19915] team3: entered allmulticast mode [ 1334.663879][T19915] 8021q: adding VLAN 0 to HW filter on device team3 [ 1336.224268][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.282811][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1336.291794][T19930] openvswitch: netlink: Flow actions attr not present in new flow. [ 1336.496126][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1336.612395][T19940] team4: entered promiscuous mode [ 1336.657467][T19940] team4: entered allmulticast mode [ 1336.718746][T19940] 8021q: adding VLAN 0 to HW filter on device team4 [ 1337.444383][ T30] audit: type=1400 audit(1336.908:1684): avc: denied { mount } for pid=19951 comm="syz.2.3504" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1337.465587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.850795][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1337.857071][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1338.111677][ T30] audit: type=1400 audit(1337.488:1685): avc: denied { connect } for pid=19961 comm="syz.0.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1338.130742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.136965][ T30] audit: type=1400 audit(1337.488:1686): avc: denied { bind } for pid=19961 comm="syz.0.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1338.396331][T19958] ceph: No mds server is up or the cluster is laggy [ 1338.411761][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1338.471193][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1338.684042][ T30] audit: type=1400 audit(1338.118:1687): avc: denied { getopt } for pid=19971 comm="syz.1.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1338.984600][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1339.295284][T19983] team4: entered promiscuous mode [ 1339.310866][T19983] team4: entered allmulticast mode [ 1339.324332][T19983] 8021q: adding VLAN 0 to HW filter on device team4 [ 1341.731146][T19991] syz_tun: entered allmulticast mode [ 1341.936457][T20000] sp0: Synchronizing with TNC [ 1342.587335][T19990] syz_tun: left allmulticast mode [ 1342.696510][T20005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.522709][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'. [ 1344.820698][T20023] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1344.960390][T18581] Bluetooth: hci4: unexpected event for opcode 0x080c [ 1345.584645][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1346.784469][ T30] audit: type=1400 audit(1346.238:1688): avc: denied { read } for pid=20051 comm="syz.3.3528" dev="sockfs" ino=67413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1347.138493][T20052] FAULT_INJECTION: forcing a failure. [ 1347.138493][T20052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.151727][T20052] CPU: 1 UID: 0 PID: 20052 Comm: syz.3.3528 Not tainted syzkaller #0 PREEMPT(full) [ 1347.151744][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1347.151751][T20052] Call Trace: [ 1347.151756][T20052] [ 1347.151760][T20052] dump_stack_lvl+0x16c/0x1f0 [ 1347.151781][T20052] should_fail_ex+0x512/0x640 [ 1347.151797][T20052] strncpy_from_user+0x3b/0x2e0 [ 1347.151811][T20052] getname_flags.part.0+0x8f/0x550 [ 1347.151829][T20052] getname_flags+0x93/0xf0 [ 1347.151839][T20052] do_sys_openat2+0xb8/0x1d0 [ 1347.151853][T20052] ? __pfx_do_sys_openat2+0x10/0x10 [ 1347.151869][T20052] ? __fget_files+0x20e/0x3c0 [ 1347.151883][T20052] __x64_sys_openat+0x174/0x210 [ 1347.151897][T20052] ? __pfx___x64_sys_openat+0x10/0x10 [ 1347.151910][T20052] ? ksys_write+0x1ac/0x250 [ 1347.151926][T20052] do_syscall_64+0xcd/0xfa0 [ 1347.151943][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.151955][T20052] RIP: 0033:0x7f54cad8d810 [ 1347.151965][T20052] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1347.151976][T20052] RSP: 002b:00007f54cbbf7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1347.151987][T20052] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f54cad8d810 [ 1347.151995][T20052] RDX: 0000000000000002 RSI: 00007f54cbbf7fa0 RDI: 00000000ffffff9c [ 1347.152002][T20052] RBP: 00007f54cbbf7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.152009][T20052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1347.152015][T20052] R13: 00007f54cafe6038 R14: 00007f54cafe5fa0 R15: 00007ffdbae4f2b8 [ 1347.152030][T20052] [ 1347.325494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1347.379877][T20055] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1349.684434][T20079] NILFS (nbd2): device size too small [ 1351.821193][ T30] audit: type=1400 audit(1351.258:1689): avc: denied { shutdown } for pid=20091 comm="syz.3.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1351.911742][ T30] audit: type=1400 audit(1351.258:1690): avc: denied { ioctl } for pid=20091 comm="syz.3.3542" path="socket:[67727]" dev="sockfs" ino=67727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1352.267778][T20103] sp0: Synchronizing with TNC [ 1354.424929][ T30] audit: type=1400 audit(1353.888:1691): avc: denied { write } for pid=20110 comm="syz.4.3547" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1354.447334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.005739][ T30] audit: type=1400 audit(1354.448:1692): avc: denied { associate } for pid=20110 comm="syz.4.3547" name="memory.numa_stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1356.341930][T20122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3550'. [ 1357.131050][ T5868] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1357.262393][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 1357.323166][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1357.341445][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 1357.351179][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1357.363325][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1357.381005][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.522209][T20130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1357.533520][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 1357.555008][T20130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1357.613503][T20138] ceph: No mds server is up or the cluster is laggy [ 1357.812183][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.904107][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 1357.910608][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 1357.950344][T20136] team5: entered promiscuous mode [ 1357.956029][T20136] team5: entered allmulticast mode [ 1358.421394][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 1358.428389][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 1358.467373][T20136] 8021q: adding VLAN 0 to HW filter on device team5 [ 1358.579696][ T5868] usb 1-1: USB disconnect, device number 88 [ 1358.681329][T20141] netlink: 'syz.2.3555': attribute type 21 has an invalid length. [ 1358.729132][T20141] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1358.752606][T20153] udevd[20153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.796679][T20144] batadv1: entered promiscuous mode [ 1358.912198][T20144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1359.112938][T20141] netlink: 'syz.2.3555': attribute type 4 has an invalid length. [ 1359.126564][T20141] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1359.458649][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1359.838364][T20164] team5: entered promiscuous mode [ 1359.843840][T20164] team5: entered allmulticast mode [ 1359.849986][T20164] 8021q: adding VLAN 0 to HW filter on device team5 [ 1359.946027][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1360.101894][T20175] team4: entered promiscuous mode [ 1360.107363][T20175] team4: entered allmulticast mode [ 1360.115379][T20175] 8021q: adding VLAN 0 to HW filter on device team4 [ 1360.536438][T20170] tipc: Can't bind to reserved service type 2 [ 1360.572129][ T30] audit: type=1400 audit(1359.998:1693): avc: denied { bind } for pid=20166 comm="syz.3.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1361.064666][T20193] fuse: Unknown parameter 'fEA_U ' [ 1361.237160][T18581] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 1361.247710][T18581] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 1362.008712][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.302843][T20222] ./file0: Can't lookup blockdev [ 1363.213562][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1363.233096][T20238] team6: entered promiscuous mode [ 1363.238142][T20238] team6: entered allmulticast mode [ 1363.244129][T20238] 8021q: adding VLAN 0 to HW filter on device team6 [ 1364.447360][ T5135] Bluetooth: hci4: command 0x040f tx timeout [ 1364.872177][ T977] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1365.023719][T20270] fuse: Unknown parameter 'fEA_U ' [ 1365.152147][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 1365.499785][T18581] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1365.512224][T18581] Bluetooth: hci4: Injecting HCI hardware error event [ 1365.526133][ T5135] Bluetooth: hci4: hardware error 0x00 [ 1365.543784][ T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1365.566430][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1365.582016][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1365.594730][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1365.607713][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1365.630085][ T977] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1365.645799][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.660629][ T977] usb 3-1: Product: syz [ 1365.667251][ T977] usb 3-1: Manufacturer: syz [ 1365.673151][ T977] usb 3-1: SerialNumber: syz [ 1365.701615][ T977] usb 3-1: config 0 descriptor?? [ 1365.984504][T20277] syz_tun: entered allmulticast mode [ 1367.063171][T20244] tipc: Started in network mode [ 1367.068340][T20244] tipc: Node identity ac14140f, cluster identity 4711 [ 1367.076678][T20244] tipc: New replicast peer: 255.255.255.255 [ 1367.090393][T20244] tipc: Enabled bearer , priority 10 [ 1367.172345][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.222020][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.253651][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.283136][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.289722][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.309622][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.322888][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.344672][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.352478][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.362356][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.377424][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.392275][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.402106][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.421964][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.428372][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.442460][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.451994][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.472234][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.478627][ T977] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1367.486357][ T977] input input31: Timeout waiting for response from device. [ 1367.506793][ T977] usb 3-1: USB disconnect, device number 66 [ 1367.545053][T13732] libceph: connect (1)[c::]:6789 error -101 [ 1367.552390][T13732] libceph: mon0 (1)[c::]:6789 connect error [ 1367.588287][T20312] ceph: No mds server is up or the cluster is laggy [ 1367.748216][T20299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1367.761986][ T5135] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1368.091086][ T1207] tipc: Node number set to 2886997007 [ 1369.053161][ T30] audit: type=1400 audit(1368.468:1694): avc: denied { name_bind } for pid=20331 comm="syz.2.3594" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1369.073870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.608347][ T30] audit: type=1400 audit(1369.068:1695): avc: denied { accept } for pid=20331 comm="syz.2.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1369.655402][T20343] fuse: Unknown parameter 'fEA_U ' [ 1369.788830][T20347] comedi comedi0: pcm3724: a I/O base address must be specified [ 1369.839088][ T30] audit: type=1400 audit(1369.298:1696): avc: denied { node_bind } for pid=20346 comm="syz.0.3598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1369.858673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.569821][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3603'. [ 1370.588978][T20363] team8: entered promiscuous mode [ 1370.594117][T20363] team8: entered allmulticast mode [ 1370.599567][T20363] 8021q: adding VLAN 0 to HW filter on device team8 [ 1370.792022][ T5868] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1370.951853][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 1370.980503][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.003411][ T5868] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 1371.013240][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.024289][ T5868] usb 5-1: Product: syz [ 1371.035024][ T5868] usb 5-1: Manufacturer: syz [ 1371.043436][ T5868] usb 5-1: SerialNumber: syz [ 1371.072140][ T5868] usb 5-1: config 0 descriptor?? [ 1371.127449][ T5868] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1371.152199][ T5868] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1371.253790][ T5868] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1371.781608][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1372.064520][T20388] team7: entered promiscuous mode [ 1372.074431][T20388] team7: entered allmulticast mode [ 1372.117665][ T30] audit: type=1400 audit(1371.578:1697): avc: denied { mount } for pid=20392 comm="syz.3.3610" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1372.159986][T20393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.173053][T20393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.243592][ C1] ------------[ cut here ]------------ [ 1372.249653][ C1] ODEBUG: free active (active state 0) object: ffff8880567b5090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1372.263193][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1372.272472][ C1] Modules linked in: [ 1372.276823][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1372.285813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1372.295931][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1372.301791][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 7f f0 8b 4c 89 e6 48 c7 c7 a0 73 f0 8b e8 af e3 ce fc 90 <0f> 0b 90 90 58 83 05 b6 cd d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1372.321446][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1372.327592][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b3ee8 [ 1372.335605][ C1] RDX: ffff88801d6ba480 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 1372.343734][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1372.351732][ C1] R10: 0000000000000000 R11: fffffffffffef340 R12: ffffffff8bf07a40 [ 1372.359729][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a4d69e0 R15: ffffc90000a08b18 [ 1372.367709][ C1] FS: 0000000000000000(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 1372.376663][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.383250][ C1] CR2: 00007fec55117d60 CR3: 000000005e149000 CR4: 00000000003526f0 [ 1372.391234][ C1] Call Trace: [ 1372.394523][ C1] [ 1372.397349][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1372.402998][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1372.408852][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1372.414448][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1372.420538][ C1] ? mark_held_locks+0x49/0x80 [ 1372.425344][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 1372.430721][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1372.435974][ C1] kfree+0x291/0x6d0 [ 1372.439906][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1372.445087][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1372.450214][ C1] rose_timer_expiry+0x53f/0x630 [ 1372.455199][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1372.460700][ C1] call_timer_fn+0x19a/0x620 [ 1372.465347][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1372.470452][ C1] ? rcu_is_watching+0x12/0xc0 [ 1372.475250][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1372.480722][ C1] __run_timers+0x6ef/0x960 [ 1372.485257][ C1] ? __pfx___run_timers+0x10/0x10 [ 1372.490333][ C1] run_timer_base+0x114/0x190 [ 1372.495035][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1372.500267][ C1] ? rcu_is_watching+0x12/0xc0 [ 1372.505047][ C1] run_timer_softirq+0x1a/0x40 [ 1372.509816][ C1] handle_softirqs+0x219/0x8e0 [ 1372.514596][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1372.519879][ C1] __irq_exit_rcu+0x109/0x170 [ 1372.524578][ C1] irq_exit_rcu+0x9/0x30 [ 1372.528824][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1372.534491][ C1] [ 1372.537411][ C1] [ 1372.540361][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1372.546346][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1372.552175][ C1] Code: 07 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 d5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1372.571840][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1372.577930][ C1] RAX: 000000000630a0f7 RBX: 0000000000000001 RCX: ffffffff8b6052a9 [ 1372.585908][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a259 RDI: ffffffff8bf06e40 [ 1372.593902][ C1] RBP: ffffed1003ad7490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1372.601888][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1372.609881][ C1] R13: ffff88801d6ba480 R14: ffffffff9081f6d0 R15: 0000000000000000 [ 1372.617868][ C1] ? ct_kernel_exit+0x139/0x190 [ 1372.622748][ C1] default_idle+0x13/0x20 [ 1372.627088][ C1] default_idle_call+0x6c/0xb0 [ 1372.631859][ C1] do_idle+0x38d/0x500 [ 1372.635942][ C1] ? __pfx_do_idle+0x10/0x10 [ 1372.640546][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1372.645792][ C1] cpu_startup_entry+0x4f/0x60 [ 1372.650556][ C1] start_secondary+0x21d/0x2b0 [ 1372.655343][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1372.660712][ C1] common_startup_64+0x13e/0x148 [ 1372.665674][ C1] [ 1372.668730][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1372.675996][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1372.684918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1372.694968][ C1] Call Trace: [ 1372.698235][ C1] [ 1372.701152][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1372.705735][ C1] vpanic+0x640/0x6f0 [ 1372.709715][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1372.714900][ C1] panic+0xca/0xd0 [ 1372.718614][ C1] ? __pfx_panic+0x10/0x10 [ 1372.723027][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1372.728177][ C1] check_panic_on_warn+0xab/0xb0 [ 1372.733117][ C1] __warn+0xf6/0x3c0 [ 1372.737037][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1372.742229][ C1] report_bug+0x3c3/0x580 [ 1372.746560][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1372.751761][ C1] handle_bug+0x184/0x210 [ 1372.756098][ C1] exc_invalid_op+0x17/0x50 [ 1372.760586][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1372.765423][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1372.771231][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 7f f0 8b 4c 89 e6 48 c7 c7 a0 73 f0 8b e8 af e3 ce fc 90 <0f> 0b 90 90 58 83 05 b6 cd d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1372.790849][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1372.796909][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b3ee8 [ 1372.804873][ C1] RDX: ffff88801d6ba480 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 1372.812844][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1372.820805][ C1] R10: 0000000000000000 R11: fffffffffffef340 R12: ffffffff8bf07a40 [ 1372.829112][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a4d69e0 R15: ffffc90000a08b18 [ 1372.837075][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1372.842707][ C1] ? __warn_printk+0x198/0x350 [ 1372.847470][ C1] ? __warn_printk+0x1a5/0x350 [ 1372.852234][ C1] ? debug_print_object+0x1a1/0x2b0 [ 1372.857422][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1372.863055][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1372.868876][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1372.874419][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1372.880483][ C1] ? mark_held_locks+0x49/0x80 [ 1372.885340][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 1372.890709][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1372.895949][ C1] kfree+0x291/0x6d0 [ 1372.899880][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1372.904992][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1372.910101][ C1] rose_timer_expiry+0x53f/0x630 [ 1372.915040][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1372.920500][ C1] call_timer_fn+0x19a/0x620 [ 1372.925088][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1372.930191][ C1] ? rcu_is_watching+0x12/0xc0 [ 1372.934946][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1372.940397][ C1] __run_timers+0x6ef/0x960 [ 1372.944895][ C1] ? __pfx___run_timers+0x10/0x10 [ 1372.949924][ C1] run_timer_base+0x114/0x190 [ 1372.954595][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1372.959784][ C1] ? rcu_is_watching+0x12/0xc0 [ 1372.964634][ C1] run_timer_softirq+0x1a/0x40 [ 1372.969456][ C1] handle_softirqs+0x219/0x8e0 [ 1372.974244][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1372.979549][ C1] __irq_exit_rcu+0x109/0x170 [ 1372.984221][ C1] irq_exit_rcu+0x9/0x30 [ 1372.988467][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1372.994118][ C1] [ 1372.997059][ C1] [ 1372.999978][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1373.005950][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1373.011580][ C1] Code: 07 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 d5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1373.031197][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1373.037275][ C1] RAX: 000000000630a0f7 RBX: 0000000000000001 RCX: ffffffff8b6052a9 [ 1373.045245][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a259 RDI: ffffffff8bf06e40 [ 1373.053338][ C1] RBP: ffffed1003ad7490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1373.061315][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1373.069294][ C1] R13: ffff88801d6ba480 R14: ffffffff9081f6d0 R15: 0000000000000000 [ 1373.077266][ C1] ? ct_kernel_exit+0x139/0x190 [ 1373.082127][ C1] default_idle+0x13/0x20 [ 1373.086489][ C1] default_idle_call+0x6c/0xb0 [ 1373.091339][ C1] do_idle+0x38d/0x500 [ 1373.095429][ C1] ? __pfx_do_idle+0x10/0x10 [ 1373.100015][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1373.105214][ C1] cpu_startup_entry+0x4f/0x60 [ 1373.109976][ C1] start_secondary+0x21d/0x2b0 [ 1373.114738][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1373.120021][ C1] common_startup_64+0x13e/0x148 [ 1373.124956][ C1] [ 1373.128194][ C1] Kernel Offset: disabled [ 1373.132511][ C1] Rebooting in 86400 seconds..