last executing test programs: 1m40.563161835s ago: executing program 3 (id=330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0xfffffffd, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x55ab}}, 0x10) 1m40.470411512s ago: executing program 3 (id=331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x14, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @enum={0x6, 0x0, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x9, 0x506}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@typedef={0x6, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @volatile={0x1}, @volatile={0x3}]}, {0x0, [0x5f, 0x2e, 0x0, 0x5f, 0x30, 0x5f, 0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/192, 0x60, 0xc0, 0x1, 0x8, 0x10000, @value=r3}, 0x28) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800eb0000000000000000000000000062011800e10000009505000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m40.469903022s ago: executing program 3 (id=332): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000070000000b00000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x23, 0x800, 0x16f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008fdff81000040"]) (async) openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x1c7080, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00400000200201001c0012800b00010069703667726500200c0002800600030081ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}, 0x0) 1m40.316550521s ago: executing program 3 (id=333): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e05035b0c0910c15e63a6b0a8dbb56782c5af2ec8ac1957fa248befbf106be2e116db287ec6dc3706bb480b0093a34d0064b79e451ee03d377bc2817b940d922b6808df22"], 0x8) syz_open_dev$usbfs(0x0, 0x1ff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000300)={r1, r3}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0xa0, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x4805, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) chdir(&(0x7f0000000080)='./file0\x00') r6 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000003640)=[{{&(0x7f0000000280)=@file={0x1, './file2\x00'}, 0x6e, 0x0}}], 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2e1", 0x2}], 0x1, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x8800}}], 0x1, 0x0) 1m40.315870831s ago: executing program 3 (id=334): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) keyctl$read(0xf, r1, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x0) (rerun: 32) 1m40.173531941s ago: executing program 3 (id=335): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) 1m17.449386507s ago: executing program 32 (id=335): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) 1m16.866412243s ago: executing program 2 (id=532): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) r6 = syz_open_dev$amidi(&(0x7f00000001c0), 0x4, 0x10800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x7f, 0x0, &(0x7f0000000200)=[r6, r1, r4, r0, r5]}, 0x5) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000180), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) 1m16.795824898s ago: executing program 2 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x4571) read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)=@newae={0x544, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d2, 0x2, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, [@algo_auth={0x12d, 0x1, {{'wp512\x00'}, 0x728, "71571a532c11e767442e3c5ff15f9401ab752229f8b5ca60b3cf5e42aeee0920e8be68f9adaf6741bdcffdbf23e14ae2a92cb9da897459fe0eb1f58a24c061854faef8d983c7c7b3f662dcebefe752132bbb3d5cc361b584a3b8047b91979f8b93a1a8c1a31f316a978dd5b9846b2e7b1bf269dfe8fbd25ff4435dcf04c09fd99cf844236a0d2a058e9ba34806835290af514ecce709ede76180ac495cac488e4357baa9c4b9b87087db1b736a4ca5c928f6cece4f91949e78e7f60416cacb9b1e932cabc0b5e6b8aacbe6df09cbad9cae7d3e4cb07657e09b4ef9c3d2b69cd812b299d492"}}, @algo_crypt={0x131, 0x2, {{'ctr-aes-aesni\x00'}, 0x748, "ca28e2329a3102c44e51b48735d0facc39cb34af12d6336d1089b0c9f6d63a09e57f0b52f42782cb6f20199ac035abdc196eaf5d9a36749a47289dcb424efc2f569865959658ac4234e398ecbec2cb790fca005fb2f71e6c1391706b6c1f71c82244886dda997d388758449f5fb67c9f5b1119635d62bf0c7f4adac29949194c27c4e85e76589766b3c5907def09c98a4e20f506c43e0083be05c3970cba3376b4aedb2ca5633079dcdfa06fe6a14c2cc3f69bb153ce1cc898bf65d5de4f91dc5cec2bd189e40762d0428b526058153989646f1070f979c014add8e6d0977a84a538bf35ecba2cf4bf"}}, @algo_aead={0xfb, 0x12, {{'gcm(blowfish)\x00'}, 0x578, 0xc0, "f8a63fb767563c48714165115f11f9a6d24d970a1a56d9c084180c9039e52f2a14d256e5fa9d7b669011a15bfaac93301ca06ec095973541e2302c8bcc6cd5cace7c358569cc32b3ec401c9a5bc379ce7e181e165543b0da5a76aa73aa67643c1c475a1312aa59f340f37173195022ff55f988c87ccc40822d91c391042afac4f4ecaa4a6ebf88cd9b156dfff013c5d9808cb7c14aaa8e92f88bc73a31e4d11cdf5144151a074e4decc9ed6b99029f"}}, @lifetime_val={0x24, 0x9, {0x6, 0x7f, 0x2, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in6=@local}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@local, 0x0, 0xa}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, @algo_auth_trunc={0x7d, 0x14, {{'sha384-arm\x00'}, 0x188, 0x200, "d9dee1fdc48e48a44eb8bdf4ba9d1259ed5551607b1250c38bddb4dcf8835935020e26f8e322e87a9915635c94286c2796"}}, @sec_ctx={0x45, 0x8, {0x41, 0x8, 0x1, 0x0, 0x39, "f739691a53091b2dacdd4a6880adb012d23633d52b6852ab36d7bb46dcf74340d256dd02953ee096abc79ae029ee0d2c3da7c862f832c20911"}}, @sec_ctx={0x53, 0x8, {0x4f, 0x8, 0x1, 0x2, 0x47, "c05bcb64087fbd79772fdcae4daefb4d1bd4e05e15eddc8e27e2609fc77b29c9228528ae07c6101866d8b86cf9b59651ea2d1a68836ff1b9c9679dbf830dc458d7c40b8443f24d"}}]}, 0x544}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x4c, r3, 0xd55319eec59dfa33, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) (async) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) (async) keyctl$set_timeout(0xf, r2, 0x4571) (async) read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)=@newae={0x544, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d2, 0x2, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, [@algo_auth={0x12d, 0x1, {{'wp512\x00'}, 0x728, "71571a532c11e767442e3c5ff15f9401ab752229f8b5ca60b3cf5e42aeee0920e8be68f9adaf6741bdcffdbf23e14ae2a92cb9da897459fe0eb1f58a24c061854faef8d983c7c7b3f662dcebefe752132bbb3d5cc361b584a3b8047b91979f8b93a1a8c1a31f316a978dd5b9846b2e7b1bf269dfe8fbd25ff4435dcf04c09fd99cf844236a0d2a058e9ba34806835290af514ecce709ede76180ac495cac488e4357baa9c4b9b87087db1b736a4ca5c928f6cece4f91949e78e7f60416cacb9b1e932cabc0b5e6b8aacbe6df09cbad9cae7d3e4cb07657e09b4ef9c3d2b69cd812b299d492"}}, @algo_crypt={0x131, 0x2, {{'ctr-aes-aesni\x00'}, 0x748, "ca28e2329a3102c44e51b48735d0facc39cb34af12d6336d1089b0c9f6d63a09e57f0b52f42782cb6f20199ac035abdc196eaf5d9a36749a47289dcb424efc2f569865959658ac4234e398ecbec2cb790fca005fb2f71e6c1391706b6c1f71c82244886dda997d388758449f5fb67c9f5b1119635d62bf0c7f4adac29949194c27c4e85e76589766b3c5907def09c98a4e20f506c43e0083be05c3970cba3376b4aedb2ca5633079dcdfa06fe6a14c2cc3f69bb153ce1cc898bf65d5de4f91dc5cec2bd189e40762d0428b526058153989646f1070f979c014add8e6d0977a84a538bf35ecba2cf4bf"}}, @algo_aead={0xfb, 0x12, {{'gcm(blowfish)\x00'}, 0x578, 0xc0, "f8a63fb767563c48714165115f11f9a6d24d970a1a56d9c084180c9039e52f2a14d256e5fa9d7b669011a15bfaac93301ca06ec095973541e2302c8bcc6cd5cace7c358569cc32b3ec401c9a5bc379ce7e181e165543b0da5a76aa73aa67643c1c475a1312aa59f340f37173195022ff55f988c87ccc40822d91c391042afac4f4ecaa4a6ebf88cd9b156dfff013c5d9808cb7c14aaa8e92f88bc73a31e4d11cdf5144151a074e4decc9ed6b99029f"}}, @lifetime_val={0x24, 0x9, {0x6, 0x7f, 0x2, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in6=@local}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@local, 0x0, 0xa}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, @algo_auth_trunc={0x7d, 0x14, {{'sha384-arm\x00'}, 0x188, 0x200, "d9dee1fdc48e48a44eb8bdf4ba9d1259ed5551607b1250c38bddb4dcf8835935020e26f8e322e87a9915635c94286c2796"}}, @sec_ctx={0x45, 0x8, {0x41, 0x8, 0x1, 0x0, 0x39, "f739691a53091b2dacdd4a6880adb012d23633d52b6852ab36d7bb46dcf74340d256dd02953ee096abc79ae029ee0d2c3da7c862f832c20911"}}, @sec_ctx={0x53, 0x8, {0x4f, 0x8, 0x1, 0x2, 0x47, "c05bcb64087fbd79772fdcae4daefb4d1bd4e05e15eddc8e27e2609fc77b29c9228528ae07c6101866d8b86cf9b59651ea2d1a68836ff1b9c9679dbf830dc458d7c40b8443f24d"}}]}, 0x544}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x4c, r3, 0xd55319eec59dfa33, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) 1m16.692078256s ago: executing program 2 (id=536): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x40086602, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x103383, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m16.063559687s ago: executing program 2 (id=539): r0 = gettid() wait4(0x0, 0x0, 0x20000000, 0x0) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x26, r4, 0x0) socket$alg(0x26, 0x5, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r9, 0x1072c4c531dbe45b, 0x70bd29, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4048004) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000500)='cdg\x00', 0x4) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r3, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r13}, 0x8) read$ptp(r1, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 1m15.977586555s ago: executing program 2 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000100)='./file1\x00', 0x139442, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) setrlimit(0x8, &(0x7f0000000380)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x400}) 1m15.844323443s ago: executing program 2 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x31608a2, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xe6\x1fch\xc9#\x98\xb1\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\x00\x00') 1m1.538906509s ago: executing program 33 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x31608a2, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xe6\x1fch\xc9#\x98\xb1\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\x00\x00') 15.469799549s ago: executing program 1 (id=1465): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) r5 = dup(r4) getsockname$packet(r5, 0x0, &(0x7f0000001540)) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0xc0d, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x840) 15.379346278s ago: executing program 1 (id=1467): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) (async) socket$kcm(0xa, 0x2, 0x73) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r2, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa0000) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000040)=""/160) 15.317890212s ago: executing program 1 (id=1471): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) syslog(0x9, 0x0, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 15.127462687s ago: executing program 1 (id=1473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 11.457338757s ago: executing program 1 (id=1473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 4.778989867s ago: executing program 5 (id=1568): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c03, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.728992485s ago: executing program 5 (id=1569): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c03, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 4.573552231s ago: executing program 5 (id=1570): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x1) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@hopopts={0x67}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000022000900000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x8824}, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0/file0\x00'}) setsockopt$inet6_tcp_buf(r4, 0x6, 0x46e6dee563d7f9c1, &(0x7f0000000200)="5e22a24bdd6e5dc9e768c428d2a0f7fccbed43c0e1f5de324225b91552fd3e30d475a8", 0x23) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000ac0)={0x5d4, "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"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r5, 0x540b, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000080)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c03, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.482324132s ago: executing program 1 (id=1473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 4.049822007s ago: executing program 4 (id=1572): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x408000) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x60}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) ioctl$int_in(r1, 0x25406f4a8aecce3c, &(0x7f0000000000)=0xb) 4.049539717s ago: executing program 4 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x225b, &(0x7f0000000240)={0x0, 0x81ea, 0x10100, 0x1, 0xb2}, &(0x7f0000000000), &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000440)="8fc3901fd7b0b80838bf840d2a2d755454a9bf04069e26ed65892cdce4bf4130aa623cd75fdd5e9d9c0bf4c37ed32001f73d37f5f8b3d0a3ffb75abada1d87af4a38fc5eb2a95cef978732e15b68b53cfb423f3aeae048fb99adeb51f4c9e8af41810b7578ba5b411725008acdd242964b2fca75c136cc7c38f73baf2e01d7682c84d9fee72f765e1351c9731fb1eae6e994330d4fd84b9894d416bc2ac5bd475f841f38a783d41850503cc473fd787a5cbaf12c2b0b711f02c1365245d137a74ba2d518f89c006cfd30ea", &(0x7f0000000600)=""/156, 0x4}, 0x20) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010003724000000e4ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002200001c0012800b00010067656e65766500000c0002800500080000000000"], 0x3c}}, 0x0) 3.96284546s ago: executing program 4 (id=1574): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x3, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) (async) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-ce)\x00'}, 0x58) 3.887929274s ago: executing program 4 (id=1576): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000001480)={0x0, 0x0, 0x0, @lost_msgs}) fchown(0xffffffffffffffff, 0x0, 0xee01) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) timer_gettime(r1, &(0x7f0000000200)) poll(&(0x7f00000001c0)=[{r0, 0x1014}], 0x1, 0x7) chown(&(0x7f0000000240)='./file0\x00', r4, r5) sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r6, 0x1, {0x1, 0x0, 0x2}}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="161845d831e7e84356064dc16ed4cd9bc4a61f26db0e7d1be16c72ca8806d6c09fdcaa68234eb7ab26d03361a719a0e0356a681bf5b8dd9b65b4de50e3f5f165d506ea8ebb4b30f2bb0f821695002b0f041223705ead96a5", 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) timer_gettime(r1, &(0x7f0000000280)) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000380)={0x80}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000002c0)={0x35}) 2.177839247s ago: executing program 0 (id=1584): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "c72a63"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xd6f0, 0x10669e5f, 0x2, 0x7ff, 0x4]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "c72a63"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xd6f0, 0x10669e5f, 0x2, 0x7ff, 0x4]}, &(0x7f0000000000)=0x78) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) (async) 2.114035684s ago: executing program 0 (id=1585): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100)="bc3e5c1a38ebd8312bb41ecd18a8b10ee15434d190be9ddf3f26026f78880d90badc5480b60d0ac806713c135d6cc47c65b16bcd434cb964e45265d41d874f34f556f76234a87b4705ba89eb0564a4ac38c4bfe35fe8fb80614568aca55abd54cac7e62604f77caab98e28ea78d18dc8d5fa1f76021386d421a024e7a85089527d9f6df9ad3c66791bab5e3fccfaf96b0f0365a319dcb4ea248ed430f11fcb29376f469064e949b32f04", &(0x7f0000000200)=@udp=r2, 0x2}, 0x20) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000280)=""/4096) (async) fgetxattr(0xffffffffffffffff, &(0x7f0000001280)=@known='system.posix_acl_access\x00', &(0x7f00000012c0)=""/4096, 0x1000) (async) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0x100, 0x464, 0x100, 0x70bd2d, 0x25dfdbfe, "bf6895e0dfd3f4bd47f8a0e8e6af5502deb345305d3db65b160a2fa812341a5729c6dc07980487ce4de2e70f8de86aa9390ca14f5cf6a09e6c5436c6126da613ce08ce11b6967bd5e132afc994d40c6ec202beeb2c55c97dee72e8a487fdb6e63f77bc0e3eff05848d0ea76c9d4e61e34f63e24575b1b35b0b143d42846b62b002c0b60d68d3c70f72b818e3baf124f394b9cc6fb1744407576b047709ca1f3d7672f08fbcef8e2e2f48ea321f884feabe7e926562827d6411fc42bb673ad99a79ff90bdcc95813ad09d3f16519e9177ef56f42f10eb8ab82af2a5b1994d2df939be68589e9b7f2515afd2ba38", [""]}, 0x100}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002480)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x77a30741, '\x00', 0x0, r2, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002580)={{r1, 0xffffffffffffffff}, &(0x7f0000002500), &(0x7f0000002540)=r2}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000027c0)={'team0\x00', 0x0}) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x15, &(0x7f00000025c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe07b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x4, 0x6, 0xb, 0x40, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002680)='syzkaller\x00', 0x5, 0xed, &(0x7f00000026c0)=""/237, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x1, 0x10, 0xa5, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002880)=[r2, r1, r6, r2, r1], &(0x7f00000028c0)=[{0x2, 0x3, 0xb, 0x2}], 0x10, 0x7fffffff, @void, @value}, 0x94) (async) close_range(r1, r2, 0x0) (async) getpeername$ax25(r2, &(0x7f00000029c0)={{0x3, @netrom}, [@netrom, @remote, @bcast, @remote, @null, @rose, @netrom, @rose]}, &(0x7f0000002a40)=0x48) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000002a80)={0xfe, 0x7b}) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b40), r7) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000002ec0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002b80)={0x2f8, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65ab}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73074527}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10b1ae5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6b}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x35, 0x3, "5f70fc95f250dfd1dbfea0d2e449354a6670d181845563578936d916c0ac8a8041c017b1ce04ea16f4139e3037e262ca8f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf19}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0x74, 0x3, "d1bcfab4b4c8b0051166d91255f5c1eab4f2ca0e864d45c9ae30f3f2ae17462d81e0ccc08d177ae3c8b9fc6d10efe059a6c58d9c89468d3832920e8efdc3d856b2542a028420eb19b1931a77c8206991ec85483c092666fafe59b7dac760394fa7c35aaf64e0340bc0516ea78c204436"}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4800}, 0x404c014) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000002f00)={0x2, 'pimreg0\x00', {0x8}, 0x1}) (async, rerun: 64) r9 = syz_genetlink_get_family_id$team(&(0x7f0000002f80), r7) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003000)={'gre0\x00', &(0x7f0000002fc0)={'syztnl2\x00', r5, 0x8000, 0x700, 0xffffffff, 0x7fff, {{0x8, 0x4, 0x0, 0x12, 0x20, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@generic={0x89, 0x9, "ee1668c8966cb3"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003040)={'veth1_to_hsr\x00', 0x0}) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000003080)={@loopback, 0x0}, &(0x7f00000030c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000003100)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000031c0)={'erspan0\x00', &(0x7f0000003140)={'syztnl1\x00', r5, 0x7800, 0x80, 0x101, 0x1000, {{0x18, 0x4, 0x3, 0x4, 0x60, 0x66, 0x0, 0xa, 0x4, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x53, [@remote, @private=0xa010101]}, @noop, @timestamp_addr={0x44, 0x3c, 0x5, 0x1, 0x2, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x936f}, {@initdev={0xac, 0x1e, 0x9, 0x0}, 0x4}, {@multicast1}, {@multicast2, 0x5}, {@empty, 0x3}, {@loopback, 0x5f0}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000003c40)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003c00)={&(0x7f0000003200)={0x9d8, r9, 0x600, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x24}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r10}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdd}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x4, 0x2, 0x101}, {0x8000, 0x4, 0x81, 0x180a}, {0x4, 0xae, 0x65, 0x100}, {0x6, 0x9, 0xf, 0x3}, {0x0, 0xb0, 0x8, 0x8}, {0x5, 0x9b, 0x3, 0x4}, {0xfff, 0x9, 0x81, 0x80000001}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfff7, 0xb, 0xe3, 0x61}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r13}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca900}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x6, 0xd0, 0x3}, {0x5, 0x7, 0x66}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x9d8}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003c80)='./file0\x00', 0x80602, 0x45) 2.11392606s ago: executing program 0 (id=1586): symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 2.039898985s ago: executing program 0 (id=1587): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x48, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x34, 0x18, 0x0, 0x1, [@nested={0x2d, 0x1c, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @pid}, @generic="f3cc50fe634d094ec09b27ebad7974a937072c2cb851ba4a0630dbb1fa35788811"]}]}]}, 0x48}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x4}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x48, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x34, 0x18, 0x0, 0x1, [@nested={0x2d, 0x1c, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @pid}, @generic="f3cc50fe634d094ec09b27ebad7974a937072c2cb851ba4a0630dbb1fa35788811"]}]}]}, 0x48}], 0x1}, 0x0) (async) 1.829189789s ago: executing program 0 (id=1588): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda5, 0x0}}], 0x1, 0x0, 0x0) 1.828753249s ago: executing program 0 (id=1589): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 1.582726809s ago: executing program 5 (id=1590): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="4db67df5689e2125a2162cfb7fcd57d08e760c80a4f3c9a0ab4d22cc326d3f032787cd8316b398c57aa4b92b43493246fea7113b968287d2c98246bc8c9b923c25a4484eb8d6972049f26bda5a0be8ce29b42d13400967e80af004a9a1fc61e416e22faf39180d9215ad3659d0904784f489ac2861dae3a0ac744d434c89743ba42c85a5f5bde5", 0x87}], 0x1}}], 0x1, 0x4c814) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$kcm(0x2, 0x7, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r5, 0x4b30, &(0x7f0000000040)) 115.209061ms ago: executing program 5 (id=1591): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x400, 'syz1\x00', &(0x7f00000004c0)=[':#,\x00'], 0x4}) 114.15362ms ago: executing program 5 (id=1592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000044000500"], 0x178}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x63, 0x6}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x115001) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r6 = syz_open_dev$swradio(&(0x7f0000000c00), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000c40)={0x379, "aa3e5ede88efde3361c2c708bdaf38de88d27634bca38736319ef5bb543ccb68", 0x4, 0x400, 0x1, 0x63dc, 0x1, 0x4, 0x7, 0x8000}) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x80000) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r7, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000007c0)={{0xe, 0x8}, 'port0\x00', 0x70, 0x3000a, 0x3, 0x10000, 0xfcf8, 0x3ff, 0xb, 0x0, 0x5, 0x8}) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x80}}}}, {{@ipv6={@private1, @mcast1, [0xff000000], [], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0xfc}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db", 0x1}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r8, &(0x7f0000000000)=""/6, 0x1c, 0x40000040, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @empty, 0xff7}, 0x1c) r9 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r9, r10, r10}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 114.019973ms ago: executing program 4 (id=1593): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c03, 0x0) close_range(r0, 0xffffffffffffffff, 0x300) 0s ago: executing program 4 (id=1594): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000000000000000040100800c0009"], 0x114}], 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x3}}}}}}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xd}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): s in process `syz.4.892'. [ 121.653874][ T9275] xt_hashlimit: size too large, truncated to 1048576 [ 121.718608][ T9285] syz.5.894: attempt to access beyond end of device [ 121.718608][ T9285] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 121.723735][ T9285] syz.5.894: attempt to access beyond end of device [ 121.723735][ T9285] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 121.727344][ T9285] syz.5.894: attempt to access beyond end of device [ 121.727344][ T9285] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 121.732333][ T9285] syz.5.894: attempt to access beyond end of device [ 121.732333][ T9285] nbd5: rw=0, sector=18, nr_sectors = 2 limit=0 [ 121.735663][ T9285] syz.5.894: attempt to access beyond end of device [ 121.735663][ T9285] nbd5: rw=0, sector=30, nr_sectors = 2 limit=0 [ 121.739345][ T9285] syz.5.894: attempt to access beyond end of device [ 121.739345][ T9285] nbd5: rw=0, sector=36, nr_sectors = 2 limit=0 [ 121.742601][ T9285] VFS: unable to find oldfs superblock on device nbd5 [ 121.774048][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'. [ 121.799211][ T9293] bond0: entered promiscuous mode [ 121.800562][ T9293] bond_slave_0: entered promiscuous mode [ 121.802074][ T9293] bond_slave_1: entered promiscuous mode [ 122.710706][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'. [ 122.726364][ T9303] ALSA: mixer_oss: invalid index 100000 [ 123.093112][ T9311] ucma_write: process 707 (syz.0.902) changed security contexts after opening file descriptor, this is not allowed. [ 123.111312][ T5951] Bluetooth: hci4: Unknown advertising packet type: 0x16 [ 123.111364][ T5951] Bluetooth: hci4: Unknown advertising packet type: 0x1c [ 123.163642][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 123.336874][ T9348] binder_alloc: binder_alloc_mmap_handler: 9346 20ffd000-20ffe000 already mapped failed -16 [ 123.340518][ T9348] binder_alloc: 9346: binder_alloc_buf, no vma [ 123.523394][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 123.554585][ T9359] netlink: 277 bytes leftover after parsing attributes in process `syz.5.918'. [ 123.596310][ T72] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 123.614976][ T9362] netlink: 632 bytes leftover after parsing attributes in process `syz.5.919'. [ 123.616368][ T9364] netlink: 632 bytes leftover after parsing attributes in process `syz.5.919'. [ 123.768137][ T72] usb 9-1: Using ep0 maxpacket: 8 [ 123.771105][ T72] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.774775][ T72] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.778780][ T72] usb 9-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 123.781224][ T72] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.784188][ T72] usb 9-1: config 0 descriptor?? [ 123.963759][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.929'. [ 123.973540][ T9392] kvm: kvm [9391]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x100000000000000 [ 123.982822][ T72] usbhid 9-1:0.0: can't add hid device: -71 [ 123.984969][ T72] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 123.990264][ T72] usb 9-1: USB disconnect, device number 11 [ 124.007893][ T915] hid (null): unknown global tag 0xe [ 124.011813][ T915] hid-generic 0005:10CF:5504.0004: unknown global tag 0xe [ 124.017638][ T915] hid-generic 0005:10CF:5504.0004: item 0 2 1 14 parsing failed [ 124.020206][ T915] hid-generic 0005:10CF:5504.0004: probe with driver hid-generic failed with error -22 [ 124.157606][ T9411] /dev/nbd0: Can't lookup blockdev [ 124.222465][ T9429] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.941'. [ 124.222871][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 124.224882][ T9429] openvswitch: netlink: Flow key attr not present in new flow. [ 124.281530][ T9437] overlay: ./bus is not a directory [ 124.295518][ T9439] syzkaller1: left promiscuous mode [ 124.296976][ T9439] syzkaller1: left allmulticast mode [ 124.359604][ T834] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 124.411997][ T9444] trusted_key: encrypted_key: master key parameter is missing [ 124.501552][ T834] usb 6-1: Using ep0 maxpacket: 32 [ 124.504835][ T834] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 124.506963][ T834] usb 6-1: config 0 has no interface number 0 [ 124.508524][ T834] usb 6-1: config 0 interface 20 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 124.511568][ T834] usb 6-1: config 0 interface 20 altsetting 4 bulk endpoint 0xA has invalid maxpacket 1023 [ 124.515942][ T834] usb 6-1: config 0 interface 20 altsetting 4 endpoint 0x8 has invalid maxpacket 1088, setting to 64 [ 124.518672][ T834] usb 6-1: config 0 interface 20 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16 [ 124.521178][ T834] usb 6-1: config 0 interface 20 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 124.523818][ T834] usb 6-1: config 0 interface 20 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 124.526199][ T834] usb 6-1: config 0 interface 20 altsetting 4 has an endpoint descriptor with address 0x1D, changing to 0xD [ 124.529068][ T834] usb 6-1: config 0 interface 20 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 124.531891][ T834] usb 6-1: config 0 interface 20 has no altsetting 0 [ 124.535016][ T834] usb 6-1: New USB device found, idVendor=12d1, idProduct=3cf2, bcdDevice=83.72 [ 124.537439][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.539535][ T834] usb 6-1: Product: Ҏ牦ંᄙ跲婦팏긎麓益⹭䑔ోᆬ倀ꌞȦ쓌푌镶⦡쳫᫴䬲釆晜ድਯ풿誀上᪻뱰榚㤉纀ꫂꮆ猧苔่뵝᧟뼭 [ 124.540570][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 124.540579][ T39] audit: type=1400 audit(1734908336.373:717): avc: denied { ioctl } for pid=9445 comm="syz.4.947" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 124.543428][ T834] usb 6-1: Manufacturer: Ђ [ 124.545686][ T39] audit: type=1400 audit(1734908336.373:718): avc: denied { listen } for pid=9445 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.551220][ T834] usb 6-1: SerialNumber: 毰݊㫦觀⚈꼕჎ר놳泌လ蟩☯髽㕙皾퉰뫑듦ｱᑏ୐鰒⮨逎છ峺혊藵㗫튺瘃࿉濝ⓧ砘땵蝸⸰₵盜㍆홸鑗ꂰ꛻ꏭ퉻떓ꄐ퍺奞詶䇆㪊ȝ컔斜쏥茋礃㼽횹ꏈ [ 124.552154][ T834] usb 6-1: config 0 descriptor?? [ 124.557237][ T39] audit: type=1400 audit(1734908336.373:719): avc: denied { getopt } for pid=9445 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.563977][ T9402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.570854][ T9402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.572835][ T9402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.769744][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.772131][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.776856][ T834] option 6-1:0.20: GSM modem (1-port) converter detected [ 124.782460][ T834] usb 6-1: USB disconnect, device number 15 [ 124.786134][ T834] option 6-1:0.20: device disconnected [ 124.790761][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.950'. [ 124.817333][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.819150][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.821215][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.821343][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.822825][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.825345][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.825369][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.825403][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.825408][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.825822][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.827601][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.829255][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.829293][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829301][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829349][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829354][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829387][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829391][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829422][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829426][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829457][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829461][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829493][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829497][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829532][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829536][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829568][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829572][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829604][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829608][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829640][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829644][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829674][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829678][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829711][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829715][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829746][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829750][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829781][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829786][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829817][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829821][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829867][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829875][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829935][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.829942][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.829998][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830003][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830036][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830040][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830071][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830075][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830105][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830109][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830142][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830146][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830178][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830182][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830214][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830219][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830253][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830257][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830288][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830292][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830324][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830328][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830359][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830363][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830395][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 124.830399][ T9462] binder: 9461:9462 ioctl 4018620d 20000300 returned -16 [ 124.830960][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.832545][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.834534][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.836127][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.836227][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.838892][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.840590][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.842793][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.844676][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.844683][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.844716][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.844721][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.846324][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.848148][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.849818][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.851565][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 124.853183][ T9463] binder_alloc: binder_alloc_mmap_handler: 9461 20ffc000-20ffe000 already mapped failed -16 [ 124.855072][ T9464] binder: BINDER_SET_CONTEXT_MGR already set [ 124.980723][ T9464] binder: 9461:9464 ioctl 4018620d 20000040 returned -16 [ 125.195912][ T9479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.229816][ T9483] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 125.231873][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 125.245923][ T9484] ip6tnl1: entered allmulticast mode [ 125.269706][ T9486] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.495367][ T9508] random: crng reseeded on system resumption [ 125.707963][ T9508] Restarting kernel threads ... done. [ 125.899167][ T9521] netlink: 'syz.5.968': attribute type 10 has an invalid length. [ 125.905391][ T9521] batman_adv: batadv0: Adding interface: team0 [ 125.907137][ T9521] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.913707][ T9521] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.993887][ T9480] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 126.040740][ T9524] tmpfs: Unknown parameter 'hugmswer;' [ 126.120026][ T39] audit: type=1400 audit(1734908338.031:720): avc: denied { connect } for pid=9527 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.170507][ T9533] fuse: Unknown parameter 'goup_id' [ 126.370478][ T9564] CIFS mount error: No usable UNC path provided in device string! [ 126.370478][ T9564] [ 126.374222][ T9564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.379653][ T9560] overlay: ./file0 is not a directory [ 126.381908][ T9560] overlay: ./file0 is not a directory [ 126.494146][ T9581] overlayfs: failed to resolve './file1': -2 [ 126.516812][ T39] audit: type=1400 audit(1734908338.451:721): avc: denied { execute } for pid=9583 comm="syz.0.982" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.579615][ T39] audit: type=1400 audit(1734908338.514:722): avc: denied { accept } for pid=9588 comm="syz.4.984" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.585223][ T39] audit: type=1400 audit(1734908338.514:723): avc: denied { write } for pid=9588 comm="syz.4.984" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=52120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.593800][ T39] audit: type=1400 audit(1734908338.514:724): avc: denied { read } for pid=9588 comm="syz.4.984" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=52120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.666243][ T39] audit: type=1804 audit(1734908338.609:725): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.986" name="/newroot/91/bus/file0" dev="overlay" ino=522 res=1 errno=0 [ 126.779442][ T9612] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 126.783468][ T9612] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.790318][ T39] audit: type=1326 audit(1734908338.735:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.0.990" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7716785d29 code=0x0 [ 126.997632][ T6163] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 127.154091][ T6163] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.157193][ T6163] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.162084][ T6163] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.165265][ T6163] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.167541][ T6163] usb 10-1: Manufacturer: syz [ 127.170139][ T6163] usb 10-1: config 0 descriptor?? [ 127.216690][ T6163] rc_core: IR keymap rc-hauppauge not found [ 127.218805][ T6163] Registered IR keymap rc-empty [ 127.221968][ T6163] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 127.225055][ T6163] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 127.365977][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.368303][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.370798][ T9588] dccp_close: ABORT with 64 bytes unread [ 127.395548][ T5996] usb 10-1: USB disconnect, device number 4 [ 127.447106][ T9638] overlay: Unknown parameter 'pcr' [ 127.516941][ T9642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54290 sclass=netlink_route_socket pid=9642 comm=syz.4.1003 [ 127.686283][ T9664] trusted_key: encrypted_key: master key parameter is missing [ 127.729949][ T9668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9668 comm=syz.5.1010 [ 127.733823][ T9668] netlink: 'syz.5.1010': attribute type 1 has an invalid length. [ 127.744029][ T9668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.753298][ T9668] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 127.755960][ T9668] bond1: (slave batadv1): making interface the new active one [ 127.759133][ T9668] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 127.897549][ T9684] xt_cgroup: path and classid specified [ 128.130671][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 128.284506][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.287325][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.290022][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.292317][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.295764][ T9686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.298858][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.539266][ T35] usb 6-1: USB disconnect, device number 16 [ 128.572120][ T9724] geneve3: entered promiscuous mode [ 128.574055][ T9724] geneve3: entered allmulticast mode [ 128.737214][ T9745] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 128.739733][ T9745] __nla_validate_parse: 7 callbacks suppressed [ 128.739741][ T9745] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1032'. [ 128.870969][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.873110][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.902063][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1039'. [ 128.997968][ T6163] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.146067][ T9778] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9778 comm: syz.5.1046) [ 129.159738][ T6163] usb 5-1: Using ep0 maxpacket: 8 [ 129.169286][ T6163] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.171879][ T6163] usb 5-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.175640][ T6163] usb 5-1: config 1 interface 0 has no altsetting 0 [ 129.179005][ T6163] usb 5-1: New USB device found, idVendor=222a, idProduct=0001, bcdDevice= 0.40 [ 129.182932][ T6163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.185420][ T6163] usb 5-1: Product: syz [ 129.186784][ T6163] usb 5-1: Manufacturer: syz [ 129.188498][ T6163] usb 5-1: SerialNumber: syz [ 129.346605][ T9806] overlayfs: failed to resolve './file0': -2 [ 129.379038][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 129.379049][ T39] audit: type=1400 audit(1734908341.454:739): avc: denied { remount } for pid=9788 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 129.387547][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.390145][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.394631][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.396791][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.409862][ T6163] usbhid 5-1:1.0: can't add hid device: -71 [ 129.411492][ T6163] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 129.414402][ T6163] usb 5-1: USB disconnect, device number 7 [ 129.423324][ T9815] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1057'. [ 129.458329][ T9822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1059'. [ 129.646910][ T39] audit: type=1400 audit(1734908341.737:740): avc: denied { ioctl } for pid=9833 comm="syz.5.1065" path="socket:[34950]" dev="sockfs" ino=34950 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 129.674312][ T5979] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 129.689131][ T9836] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 129.691389][ T9836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.694639][ T9836] vhci_hcd vhci_hcd.0: Device attached [ 129.703788][ T9836] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 129.705500][ T9836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.707481][ T9836] vhci_hcd vhci_hcd.0: Device attached [ 129.710532][ T9836] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 129.712322][ T9836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.715258][ T9836] vhci_hcd vhci_hcd.0: Device attached [ 129.720890][ T9839] vhci_hcd: connection closed [ 129.720984][ T9837] vhci_hcd: connection closed [ 129.721005][ T9841] vhci_hcd: connection closed [ 129.722899][ T78] vhci_hcd: stop threads [ 129.727492][ T78] vhci_hcd: release socket [ 129.729190][ T78] vhci_hcd: disconnect device [ 129.731554][ T78] vhci_hcd: stop threads [ 129.733110][ T78] vhci_hcd: release socket [ 129.734729][ T78] vhci_hcd: disconnect device [ 129.739075][ T78] vhci_hcd: stop threads [ 129.741135][ T78] vhci_hcd: release socket [ 129.742734][ T78] vhci_hcd: disconnect device [ 129.845741][ T5979] usb 6-1: Using ep0 maxpacket: 32 [ 129.849115][ T5979] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 129.852084][ T5979] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 129.856064][ T5979] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 129.860149][ T5979] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 129.864851][ T5979] usb 6-1: config 0 interface 0 has no altsetting 0 [ 129.869057][ T5979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 129.872231][ T5979] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 129.875208][ T5979] usb 6-1: Product: syz [ 129.876690][ T5979] usb 6-1: Manufacturer: syz [ 129.878364][ T5979] usb 6-1: SerialNumber: syz [ 129.882571][ T5979] usb 6-1: config 0 descriptor?? [ 129.886262][ T5979] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 129.890367][ T5979] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.019789][ T9853] fuse: Unknown parameter '00000000000p0M0001000' [ 130.077864][ T39] audit: type=1400 audit(1734908342.188:741): avc: denied { append } for pid=9819 comm="syz.1.1058" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.104956][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.107742][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.110243][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.113345][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.115968][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.118610][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.121151][ T5996] hid-generic 0209:0007:0407.0005: unknown main item tag 0x0 [ 130.126900][ T5996] hid-generic 0209:0007:0407.0005: hidraw1: HID v226e6e.00 Device [syz1] on syz1 [ 130.151168][ T915] usb 6-1: USB disconnect, device number 17 [ 130.160569][ T915] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 130.182676][ T9862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9862 comm=syz.1.1072 [ 130.186218][ T9862] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 130.196920][ T9862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.211772][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.214917][ T9862] bond2: (slave batadv1): making interface the new active one [ 130.217748][ T9862] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 130.247329][ T9865] xt_hashlimit: size too large, truncated to 1048576 [ 130.415488][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1073'. [ 130.604579][ T9892] FAULT_INJECTION: forcing a failure. [ 130.604579][ T9892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.608162][ T9892] CPU: 3 UID: 0 PID: 9892 Comm: syz.4.1081 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 130.610951][ T9892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.613714][ T9892] Call Trace: [ 130.614599][ T9892] [ 130.614640][ T9889] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 130.615375][ T9892] dump_stack_lvl+0x16c/0x1f0 [ 130.615407][ T9892] should_fail_ex+0x497/0x5b0 [ 130.620008][ T9892] _copy_from_user+0x2e/0xd0 [ 130.621201][ T9892] copy_msghdr_from_user+0x99/0x160 [ 130.622569][ T9892] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 130.624105][ T9892] ___sys_sendmsg+0xff/0x1e0 [ 130.625345][ T9892] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.626618][ T39] audit: type=1400 audit(1734908342.745:742): avc: denied { block_suspend } for pid=9887 comm="syz.0.1079" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.626703][ T9892] ? __pfx_lock_release+0x10/0x10 [ 130.633481][ T9892] ? trace_lock_acquire+0x14e/0x1f0 [ 130.634872][ T9892] ? __fget_files+0x206/0x3a0 [ 130.636122][ T9892] __sys_sendmsg+0x16e/0x220 [ 130.637351][ T9892] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.638742][ T9892] do_syscall_64+0xcd/0x250 [ 130.639969][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.641538][ T9892] RIP: 0033:0x7f9a65985d29 [ 130.642482][ T39] audit: type=1400 audit(1734908342.745:743): avc: denied { read } for pid=9887 comm="syz.0.1079" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.642711][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.642723][ T9892] RSP: 002b:00007f9a66790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.642734][ T9892] RAX: ffffffffffffffda RBX: 00007f9a65b75fa0 RCX: 00007f9a65985d29 [ 130.657635][ T9892] RDX: 0000000000004000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 130.659612][ T9892] RBP: 00007f9a66790090 R08: 0000000000000000 R09: 0000000000000000 [ 130.661615][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.663588][ T9892] R13: 0000000000000000 R14: 00007f9a65b75fa0 R15: 00007ffd6ada5e68 [ 130.665759][ T9892] [ 130.666702][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.748223][ T9889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.750134][ T9889] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.763766][ T9889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.765451][ T9889] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.780427][ T9889] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.782643][ T9889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.784224][ T9889] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.799431][ T9889] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.803796][ T9889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.805417][ T9889] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.833114][ T9889] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.976596][ T9914] xt_hashlimit: size too large, truncated to 1048576 [ 130.981836][ T9914] syz.4.1089: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.985805][ T9869] Set syz1 is full, maxelem 65536 reached [ 130.988526][ T9914] CPU: 3 UID: 0 PID: 9914 Comm: syz.4.1089 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 130.992181][ T9914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.995945][ T9914] Call Trace: [ 130.996948][ T9914] [ 130.997703][ T9914] dump_stack_lvl+0x16c/0x1f0 [ 130.998870][ T9914] warn_alloc+0x24d/0x3a0 [ 130.999937][ T9914] ? __pfx_warn_alloc+0x10/0x10 [ 131.000227][ T9919] binder: 9918:9919 ioctl c0306201 20000580 returned -14 [ 131.001189][ T9914] ? __get_vm_area_node+0x1b0/0x2f0 [ 131.004251][ T9914] ? __get_vm_area_node+0x1dc/0x2f0 [ 131.005580][ T9914] __vmalloc_node_range_noprof+0x1105/0x1530 [ 131.007077][ T9914] ? __pfx___lock_acquire+0x10/0x10 [ 131.008348][ T9914] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 131.009835][ T9914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.011464][ T9914] ? __pfx_lock_release+0x10/0x10 [ 131.012717][ T9914] ? trace_lock_acquire+0x14e/0x1f0 [ 131.014094][ T9914] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 131.015660][ T9914] vmalloc_noprof+0x6b/0x90 [ 131.016842][ T9914] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 131.018422][ T9914] hashlimit_mt_check_common+0x8b0/0x1450 [ 131.019865][ T9914] hashlimit_mt_check+0x71/0x90 [ 131.021120][ T9914] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 131.022565][ T9914] xt_check_match+0x284/0xa50 [ 131.023783][ T9914] ? __wait_for_common+0x3f2/0x600 [ 131.025107][ T9914] ? __pfx_xt_check_match+0x10/0x10 [ 131.025365][ T39] audit: type=1400 audit(1734908343.175:744): avc: denied { connect } for pid=9920 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.026397][ T9914] ? xt_find_target+0x1ee/0x290 [ 131.026414][ T9914] ? xt_find_match+0x1f2/0x290 [ 131.026430][ T9914] find_check_entry.constprop.0+0x34d/0xa20 [ 131.026447][ T9914] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 131.033022][ T39] audit: type=1400 audit(1734908343.186:745): avc: denied { bind } for pid=9920 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.033866][ T9914] ? kvfree+0x47/0x50 [ 131.036913][ T39] audit: type=1400 audit(1734908343.196:746): avc: denied { ioctl } for pid=9920 comm="syz.0.1091" path="socket:[35075]" dev="sockfs" ino=35075 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.037423][ T9914] translate_table+0xd06/0x17b0 [ 131.043083][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 131.043544][ T9914] ? __pfx_translate_table+0x10/0x10 [ 131.053492][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 131.054548][ T9914] ? __might_fault+0xe3/0x190 [ 131.058185][ T9914] do_ip6t_set_ctl+0x926/0xbf0 [ 131.059454][ T9914] ? trace_contention_end+0xee/0x140 [ 131.060773][ T9914] ? __mutex_lock+0x1cc/0xa60 [ 131.061977][ T9914] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 131.063436][ T9914] ? __mutex_unlock_slowpath+0x164/0x690 [ 131.064918][ T9914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.066444][ T9914] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 131.067988][ T9914] nf_setsockopt+0x8a/0xf0 [ 131.069226][ T9914] ipv6_setsockopt+0x135/0x170 [ 131.070484][ T9914] rawv6_setsockopt+0xd7/0x680 [ 131.071687][ T9914] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 131.073084][ T9914] ? selinux_socket_setsockopt+0x6a/0x80 [ 131.074551][ T9914] ? sock_common_setsockopt+0x2e/0xf0 [ 131.075946][ T9914] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 131.077494][ T9914] do_sock_setsockopt+0x222/0x480 [ 131.078804][ T9914] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 131.080247][ T9914] ? lock_acquire+0x2f/0xb0 [ 131.081517][ T9914] __sys_setsockopt+0x1a0/0x230 [ 131.082795][ T9914] __x64_sys_setsockopt+0xbd/0x160 [ 131.084089][ T9914] ? do_syscall_64+0x91/0x250 [ 131.085335][ T9914] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.086757][ T9914] do_syscall_64+0xcd/0x250 [ 131.087938][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.089509][ T9914] RIP: 0033:0x7f9a65985d29 [ 131.090681][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.095633][ T9914] RSP: 002b:00007f9a66790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.097824][ T9914] RAX: ffffffffffffffda RBX: 00007f9a65b75fa0 RCX: 00007f9a65985d29 [ 131.099913][ T9914] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 131.101981][ T9914] RBP: 00007f9a65a01aa8 R08: 0000000000000588 R09: 0000000000000000 [ 131.104053][ T9914] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 131.106130][ T9914] R13: 0000000000000000 R14: 00007f9a65b75fa0 R15: 00007ffd6ada5e68 [ 131.108233][ T9914] [ 131.109195][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.114453][ T9914] Mem-Info: [ 131.115667][ T9914] active_anon:4877 inactive_anon:0 isolated_anon:0 [ 131.115667][ T9914] active_file:6517 inactive_file:48762 isolated_file:0 [ 131.115667][ T9914] unevictable:1768 dirty:231 writeback:0 [ 131.115667][ T9914] slab_reclaimable:7481 slab_unreclaimable:77520 [ 131.115667][ T9914] mapped:23446 shmem:2465 pagetables:759 [ 131.115667][ T9914] sec_pagetables:300 bounce:0 [ 131.115667][ T9914] kernel_misc_reclaimable:0 [ 131.115667][ T9914] free:461722 free_pcp:5809 free_cma:0 [ 131.139170][ T9914] Node 0 active_anon:21812kB inactive_anon:0kB active_file:26068kB inactive_file:194976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95944kB dirty:920kB writeback:0kB shmem:8372kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:3036kB sec_pagetables:1200kB all_unreclaimable? no [ 131.152956][ T9914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 131.162319][ T9914] Node 0 DMA free:15140kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB [ 131.169039][ T9914] lowmem_reserve[]: 0 1212 0 0 0 [ 131.170856][ T9914] Node 0 DMA32 free:258788kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:19420kB inactive_anon:0kB active_file:26068kB inactive_file:194976kB unevictable:3536kB writepending:920kB present:2080628kB managed:1269908kB mlocked:0kB bounce:0kB free_pcp:9420kB local_pcp:2320kB free_cma:0kB [ 131.178064][ T9914] lowmem_reserve[]: 0 0 0 0 0 [ 131.180145][ T9914] Node 1 Normal free:1568332kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:18956kB local_pcp:3160kB free_cma:0kB [ 131.187161][ T9914] lowmem_reserve[]: 0 0 0 0 0 [ 131.188420][ T9914] Node 0 DMA: 13*4kB (UM) 14*8kB (UM) 16*16kB (UME) 14*32kB (UME) 5*64kB (UM) 7*128kB (UME) 3*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 0*4096kB = 15140kB [ 131.192692][ T9914] Node 0 DMA32: 46*4kB (UME) 313*8kB (UME) 291*16kB (UME) 419*32kB (UME) 255*64kB (UME) 69*128kB (UME) 81*256kB (UME) 49*512kB (UME) 29*1024kB (UME) 17*2048kB (UM) 25*4096kB (UM) = 258640kB [ 131.197274][ T9914] Node 1 Normal: 7*4kB (UME) 72*8kB (UE) 47*16kB (UME) 60*32kB (UE) 50*64kB (UE) 24*128kB (UE) 3*256kB (UE) 3*512kB (ME) 2*1024kB (UE) 3*2048kB (UME) 378*4096kB (M) = 1568332kB [ 131.202640][ T9914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.205117][ T9914] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.207730][ T9914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.211236][ T9914] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.213813][ T9914] 57744 total pagecache pages [ 131.215031][ T9914] 0 pages in swap cache [ 131.216112][ T9914] Free swap = 123988kB [ 131.217922][ T9914] Total swap = 124996kB [ 131.219091][ T9914] 1048443 pages RAM [ 131.220102][ T9914] 0 pages HighMem/MovableOnly [ 131.221386][ T9914] 281645 pages reserved [ 131.222531][ T9914] 0 pages cma reserved [ 131.255422][ T35] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 131.280225][ T39] audit: type=1800 audit(1734908343.448:747): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1099" name="file1" dev="overlay" ino=1297 res=0 errno=0 [ 131.295757][ T9942] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 131.298676][ T9950] bond1: entered promiscuous mode [ 131.300080][ T9950] bond1: entered allmulticast mode [ 131.301614][ T9950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.336672][ T39] audit: type=1400 audit(1734908343.511:748): avc: denied { write } for pid=9947 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.416110][ T9942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.421909][ T9942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.423861][ T9942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.425652][ T9942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 131.479383][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1103'. [ 131.481819][ T9959] IPVS: Unknown mcast interface: wg0 [ 131.497823][ T9961] cgroup2: Unknown parameter 'grpquota' [ 131.525807][ T9963] xt_hashlimit: size too large, truncated to 1048576 [ 131.587125][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 131.596755][ T9967] bond0: option ad_select: unable to set because the bond device is up [ 132.132908][ T9997] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 132.174460][T10010] FAULT_INJECTION: forcing a failure. [ 132.174460][T10010] name failslab, interval 1, probability 0, space 0, times 1 [ 132.178178][T10010] CPU: 2 UID: 0 PID: 10010 Comm: syz.1.1118 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 132.182070][T10010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.185063][T10010] Call Trace: [ 132.185940][T10010] [ 132.186726][T10010] dump_stack_lvl+0x16c/0x1f0 [ 132.188066][T10010] should_fail_ex+0x497/0x5b0 [ 132.189704][T10010] should_failslab+0xc2/0x120 [ 132.190936][T10010] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 132.192335][T10010] ? skb_clone+0x190/0x3f0 [ 132.193494][T10010] skb_clone+0x190/0x3f0 [ 132.194594][T10010] netlink_deliver_tap+0xabd/0xd30 [ 132.195921][T10010] netlink_unicast+0x5e1/0x7f0 [ 132.197173][T10010] ? __pfx_netlink_unicast+0x10/0x10 [ 132.198950][T10010] netlink_sendmsg+0x8b8/0xd70 [ 132.200643][T10010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.202637][T10010] ____sys_sendmsg+0xaaf/0xc90 [ 132.204049][T10010] ? copy_msghdr_from_user+0x10b/0x160 [ 132.205479][T10010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.206794][T10010] ___sys_sendmsg+0x135/0x1e0 [ 132.208402][T10010] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.210284][T10010] ? __pfx_lock_release+0x10/0x10 [ 132.211653][T10010] ? trace_lock_acquire+0x14e/0x1f0 [ 132.213146][T10010] ? __fget_files+0x206/0x3a0 [ 132.214381][T10010] __sys_sendmsg+0x16e/0x220 [ 132.215607][T10010] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.216947][T10010] do_syscall_64+0xcd/0x250 [ 132.218185][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.219858][T10010] RIP: 0033:0x7f0949985d29 [ 132.221104][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.226219][T10010] RSP: 002b:00007f094a85e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.228500][T10010] RAX: ffffffffffffffda RBX: 00007f0949b75fa0 RCX: 00007f0949985d29 [ 132.230633][T10010] RDX: 0000000000004000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 132.232729][T10010] RBP: 00007f094a85e090 R08: 0000000000000000 R09: 0000000000000000 [ 132.234851][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.237128][T10010] R13: 0000000000000000 R14: 00007f0949b75fa0 R15: 00007ffc2104e378 [ 132.239284][T10010] [ 132.274759][ T9997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.276549][ T9997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.278190][ T9997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.279956][ T9997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.413920][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=10023 comm=syz.4.1123 [ 132.446087][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10023 comm=syz.4.1123 [ 132.450737][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10023 comm=syz.4.1123 [ 132.453955][T10023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=10023 comm=syz.4.1123 [ 132.503301][ T5996] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 132.516366][T10045] FAULT_INJECTION: forcing a failure. [ 132.516366][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 132.520283][T10045] CPU: 2 UID: 0 PID: 10045 Comm: syz.4.1130 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 132.523342][T10045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.526289][T10045] Call Trace: [ 132.527250][T10045] [ 132.528089][T10045] dump_stack_lvl+0x16c/0x1f0 [ 132.529423][T10045] should_fail_ex+0x497/0x5b0 [ 132.530636][T10045] ? fs_reclaim_acquire+0xae/0x150 [ 132.532012][T10045] should_failslab+0xc2/0x120 [ 132.533306][T10045] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 132.534888][T10045] ? __alloc_skb+0x2b1/0x380 [ 132.536221][T10045] __alloc_skb+0x2b1/0x380 [ 132.537436][T10045] ? __pfx___alloc_skb+0x10/0x10 [ 132.538968][T10045] ? __mutex_trylock_common+0x90/0x250 [ 132.540603][T10045] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.542678][T10045] ? __netlink_dump_start+0x154/0x970 [ 132.544664][T10045] netlink_dump+0x699/0xd00 [ 132.545956][T10045] ? __mutex_lock+0x1cc/0xa60 [ 132.547138][T10045] ? __pfx_netlink_dump+0x10/0x10 [ 132.548847][T10045] ? __netlink_dump_start+0x154/0x970 [ 132.550289][T10045] ? netlink_lookup+0x259/0x520 [ 132.551674][T10045] ? __pfx_netlink_lookup+0x10/0x10 [ 132.553026][T10045] __netlink_dump_start+0x6ca/0x970 [ 132.554400][T10045] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 132.555970][T10045] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 132.557476][T10045] nf_tables_getchain+0x50c/0x6e0 [ 132.558821][T10045] ? __pfx_nf_tables_getchain+0x10/0x10 [ 132.560381][T10045] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 132.561842][T10045] ? __nla_parse+0x40/0x60 [ 132.562936][T10045] ? __pfx_nf_tables_getchain+0x10/0x10 [ 132.564370][T10045] nfnetlink_rcv_msg+0x560/0x11e0 [ 132.565771][T10045] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.567207][T10045] ? __pfx___lock_acquire+0x10/0x10 [ 132.568683][T10045] ? lock_acquire+0x2f/0xb0 [ 132.569869][T10045] ? avc_has_perm_noaudit+0x61/0x3a0 [ 132.571267][T10045] netlink_rcv_skb+0x16b/0x440 [ 132.572569][T10045] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.574316][T10045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.575707][T10045] ? bpf_lsm_capable+0x9/0x10 [ 132.576955][T10045] ? security_capable+0x7e/0x260 [ 132.578231][T10045] ? ns_capable+0xd7/0x110 [ 132.579513][T10045] nfnetlink_rcv+0x1b4/0x430 [ 132.580830][T10045] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.582106][T10045] ? netlink_deliver_tap+0x1ae/0xd30 [ 132.583674][T10045] netlink_unicast+0x53c/0x7f0 [ 132.584934][T10045] ? __pfx_netlink_unicast+0x10/0x10 [ 132.586343][T10045] netlink_sendmsg+0x8b8/0xd70 [ 132.587600][T10045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.588981][T10045] ____sys_sendmsg+0xaaf/0xc90 [ 132.590227][T10045] ? copy_msghdr_from_user+0x10b/0x160 [ 132.591630][T10045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.593255][T10045] ___sys_sendmsg+0x135/0x1e0 [ 132.594479][T10045] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.595846][T10045] ? __pfx_lock_release+0x10/0x10 [ 132.597180][T10045] ? trace_lock_acquire+0x14e/0x1f0 [ 132.598555][T10045] ? __fget_files+0x206/0x3a0 [ 132.599848][T10045] __sys_sendmsg+0x16e/0x220 [ 132.601108][T10045] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.602718][T10045] do_syscall_64+0xcd/0x250 [ 132.603949][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.605557][T10045] RIP: 0033:0x7f9a65985d29 [ 132.606726][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.611722][T10045] RSP: 002b:00007f9a66790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.613942][T10045] RAX: ffffffffffffffda RBX: 00007f9a65b75fa0 RCX: 00007f9a65985d29 [ 132.615989][T10045] RDX: 0000000000004000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 132.618051][T10045] RBP: 00007f9a66790090 R08: 0000000000000000 R09: 0000000000000000 [ 132.620115][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.622192][T10045] R13: 0000000000000000 R14: 00007f9a65b75fa0 R15: 00007ffd6ada5e68 [ 132.624333][T10045] [ 132.648000][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.652230][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.654442][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1132'. [ 132.661662][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.666124][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.670799][ T5996] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.673772][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.680089][ T5996] usb 6-1: config 0 descriptor?? [ 132.972775][T10081] FAULT_INJECTION: forcing a failure. [ 132.972775][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 132.976257][T10081] CPU: 3 UID: 0 PID: 10081 Comm: syz.4.1141 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 132.980227][T10081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.984068][T10081] Call Trace: [ 132.984998][T10081] [ 132.985802][T10081] dump_stack_lvl+0x16c/0x1f0 [ 132.987145][T10081] should_fail_ex+0x497/0x5b0 [ 132.988396][T10081] ? fs_reclaim_acquire+0xae/0x150 [ 132.989751][T10081] should_failslab+0xc2/0x120 [ 132.991028][T10081] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 132.992589][T10081] ? __alloc_skb+0x2b1/0x380 [ 132.993840][T10081] __alloc_skb+0x2b1/0x380 [ 132.995068][T10081] ? __pfx___alloc_skb+0x10/0x10 [ 132.996508][T10081] ? __mutex_trylock_common+0x90/0x250 [ 132.997994][T10081] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.999723][T10081] ? __netlink_dump_start+0x154/0x970 [ 133.001169][T10081] netlink_dump+0x699/0xd00 [ 133.002462][T10081] ? __mutex_lock+0x1cc/0xa60 [ 133.003765][T10081] ? __pfx_netlink_dump+0x10/0x10 [ 133.005284][T10081] ? __netlink_dump_start+0x154/0x970 [ 133.006798][T10081] ? netlink_lookup+0x259/0x520 [ 133.008129][T10081] ? __pfx_netlink_lookup+0x10/0x10 [ 133.009531][T10081] __netlink_dump_start+0x6ca/0x970 [ 133.010944][T10081] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 133.012508][T10081] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 133.013995][T10081] nf_tables_getchain+0x50c/0x6e0 [ 133.015323][T10081] ? __pfx_nf_tables_getchain+0x10/0x10 [ 133.016793][T10081] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 133.018391][T10081] ? __nla_parse+0x40/0x60 [ 133.019570][T10081] ? __pfx_nf_tables_getchain+0x10/0x10 [ 133.021053][T10081] nfnetlink_rcv_msg+0x560/0x11e0 [ 133.022384][T10081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.023815][T10081] ? __pfx___lock_acquire+0x10/0x10 [ 133.025313][T10081] ? lock_acquire+0x2f/0xb0 [ 133.026508][T10081] ? avc_has_perm_noaudit+0x61/0x3a0 [ 133.027941][T10081] netlink_rcv_skb+0x16b/0x440 [ 133.029327][T10081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.030756][T10081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.032142][T10081] ? bpf_lsm_capable+0x9/0x10 [ 133.033399][T10081] ? security_capable+0x7e/0x260 [ 133.034788][T10081] ? ns_capable+0xd7/0x110 [ 133.035975][T10081] nfnetlink_rcv+0x1b4/0x430 [ 133.037211][T10081] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 133.038556][T10081] ? netlink_deliver_tap+0x1ae/0xd30 [ 133.039944][T10081] netlink_unicast+0x53c/0x7f0 [ 133.041220][T10081] ? __pfx_netlink_unicast+0x10/0x10 [ 133.042616][T10081] netlink_sendmsg+0x8b8/0xd70 [ 133.043907][T10081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.045305][T10081] ____sys_sendmsg+0xaaf/0xc90 [ 133.046566][T10081] ? copy_msghdr_from_user+0x10b/0x160 [ 133.048000][T10081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.049399][T10081] ___sys_sendmsg+0x135/0x1e0 [ 133.050681][T10081] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.052042][T10081] ? __pfx_lock_release+0x10/0x10 [ 133.053388][T10081] ? trace_lock_acquire+0x14e/0x1f0 [ 133.054808][T10081] ? __fget_files+0x206/0x3a0 [ 133.056098][T10081] __sys_sendmsg+0x16e/0x220 [ 133.057375][T10081] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.058761][T10081] do_syscall_64+0xcd/0x250 [ 133.059961][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.061536][T10081] RIP: 0033:0x7f9a65985d29 [ 133.062715][T10081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.067846][T10081] RSP: 002b:00007f9a66790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.070089][T10081] RAX: ffffffffffffffda RBX: 00007f9a65b75fa0 RCX: 00007f9a65985d29 [ 133.072179][T10081] RDX: 0000000000004000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 133.074359][T10081] RBP: 00007f9a66790090 R08: 0000000000000000 R09: 0000000000000000 [ 133.076549][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.078638][T10081] R13: 0000000000000000 R14: 00007f9a65b75fa0 R15: 00007ffd6ada5e68 [ 133.080775][T10081] [ 133.081717][ C3] vkms_vblank_simulate: vblank timer overrun [ 133.086148][ T5996] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 133.088517][ T5996] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 133.096530][ T5996] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.283428][T10090] overlayfs: failed to resolve './file0': -2 [ 133.320402][T10092] xt_hashlimit: size too large, truncated to 1048576 [ 133.541546][ T5943] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 133.697056][ T5943] usb 9-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.700870][ T5943] usb 9-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.704886][ T5943] usb 9-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 133.708469][ T5943] usb 9-1: config 0 interface 0 has no altsetting 0 [ 133.712315][ T5943] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 133.715798][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.718552][ T5943] usb 9-1: Product: syz [ 133.720025][ T5943] usb 9-1: Manufacturer: syz [ 133.721603][ T5943] usb 9-1: SerialNumber: syz [ 133.724773][ T5943] usb 9-1: config 0 descriptor?? [ 133.726887][T10086] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.926518][ T5943] appledisplay 9-1:0.0: Error while getting initial brightness: -71 [ 133.929386][ T5943] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -71 [ 133.933437][ T5943] usb 9-1: USB disconnect, device number 13 [ 134.199607][ T5941] Bluetooth: hci4: command 0x040f tx timeout [ 134.199651][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.199709][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 134.200229][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.434398][T10114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.481869][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 134.481883][ T39] audit: type=1400 audit(1734908346.808:750): avc: denied { listen } for pid=10115 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.497962][ T39] audit: type=1400 audit(1734908346.829:751): avc: denied { execute } for pid=10117 comm="syz.4.1155" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 134.585107][T10126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10126 comm=syz.0.1159 [ 134.630309][ T39] audit: type=1400 audit(1734908346.965:752): avc: denied { write } for pid=10133 comm="syz.5.1160" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.637655][ T39] audit: type=1400 audit(1734908346.965:753): avc: denied { open } for pid=10133 comm="syz.5.1160" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.778602][T10142] __nla_validate_parse: 34 callbacks suppressed [ 134.778620][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 134.791537][ T39] audit: type=1400 audit(1734908347.133:754): avc: denied { getopt } for pid=10141 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.798326][ T39] audit: type=1400 audit(1734908347.133:755): avc: denied { setopt } for pid=10141 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 134.805457][ T39] audit: type=1400 audit(1734908347.133:756): avc: denied { bind } for pid=10141 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.817259][T10147] fuse: Unknown parameter '0x0000000000000003' [ 134.833061][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 134.836100][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 134.868438][T10144] veth5: entered promiscuous mode [ 134.876256][T10155] misc userio: No port type given on /dev/userio [ 134.929664][ T39] audit: type=1400 audit(1734908347.280:757): avc: denied { watch } for pid=10161 comm="syz.5.1170" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.938390][T10164] xt_nfacct: accounting object `sy' does not exists [ 135.087026][ T834] usb 6-1: USB disconnect, device number 18 [ 135.124526][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1177'. [ 135.131840][ T39] audit: type=1400 audit(1734908347.490:758): avc: denied { write } for pid=10183 comm="syz.5.1177" name="file0" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.141542][ T39] audit: type=1400 audit(1734908347.490:759): avc: denied { open } for pid=10183 comm="syz.5.1177" path="/141/file0" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.156958][T10184] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 135.390137][ T834] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 135.531927][ T834] usb 6-1: device descriptor read/64, error -71 [ 135.761001][ T834] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 135.884578][ T834] usb 6-1: device descriptor read/64, error -71 [ 135.990348][ T834] usb usb6-port1: attempt power cycle [ 136.190288][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 136.191928][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.193518][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.195091][ T5951] Bluetooth: hci3: command 0x0419 tx timeout [ 136.330052][T10220] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1184'. [ 136.341851][ T834] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 136.371277][ T834] usb 6-1: device descriptor read/8, error -71 [ 136.440713][T10227] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 136.592630][T10231] netlink: 'syz.5.1192': attribute type 12 has an invalid length. [ 136.600305][T10231] netlink: 'syz.5.1192': attribute type 62 has an invalid length. [ 136.627743][ T834] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 136.657859][ T834] usb 6-1: device descriptor read/8, error -71 [ 136.718100][T10247] 9pnet_fd: Insufficient options for proto=fd [ 136.754585][T10251] netlink: 'syz.0.1199': attribute type 26 has an invalid length. [ 136.771108][ T834] usb usb6-port1: unable to enumerate USB device [ 136.866046][T10257] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 136.869146][T10257] netlink: 'syz.0.1203': attribute type 11 has an invalid length. [ 136.871895][T10257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1203'. [ 136.989128][T10268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1207'. [ 137.002872][T10270] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 137.125900][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 137.253278][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 137.255693][T10303] bridge_slAve_0: renamed from lo (while UP) [ 137.340897][T10313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1220'. [ 137.451023][T10315] syzkaller0: entered promiscuous mode [ 137.452594][T10315] syzkaller0: entered allmulticast mode [ 138.107550][T10337] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.161166][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.161322][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.162888][ T5941] Bluetooth: hci4: command 0x040f tx timeout [ 138.984239][T10342] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.986746][T10342] overlayfs: missing 'lowerdir' [ 139.019389][T10350] tipc: Started in network mode [ 139.020896][T10350] tipc: Node identity 4, cluster identity 4711 [ 139.023203][T10350] tipc: Node number set to 4 [ 139.072370][T10362] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 139.159927][T10362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.377293][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 139.377303][ T39] audit: type=1400 audit(1734908351.952:770): avc: denied { read } for pid=10382 comm="syz.5.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.435846][ T39] audit: type=1400 audit(1734908352.004:771): avc: denied { ioctl } for pid=10382 comm="syz.5.1241" path="socket:[37975]" dev="sockfs" ino=37975 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.565169][T10396] __nla_validate_parse: 1 callbacks suppressed [ 139.565181][T10396] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1245'. [ 139.569470][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 139.831931][T10408] veth1_vlan: left allmulticast mode [ 139.846164][T10408] macvlan0: left allmulticast mode [ 139.881880][ T39] audit: type=1400 audit(1734908352.476:772): avc: denied { write } for pid=10407 comm="syz.4.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 139.898408][T10412] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 139.900866][T10412] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 139.939164][T10415] macvlan1: entered promiscuous mode [ 139.950753][T10415] macvlan1 (unregistering): left promiscuous mode [ 139.993233][ T5951] Bluetooth: hci2: unexpected subevent 0x01 length: 16 < 18 [ 140.055570][ T42] veth1_vlan: left promiscuous mode [ 140.142433][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 140.156400][T10425] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 140.158821][T10425] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 140.245533][T10439] netlink: 'syz.5.1261': attribute type 1 has an invalid length. [ 140.245809][T10441] 9pnet_fd: Insufficient options for proto=fd [ 140.278138][ T39] audit: type=1400 audit(1734908352.896:773): avc: denied { setopt } for pid=10442 comm="syz.0.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.288649][ T39] audit: type=1400 audit(1734908352.907:774): avc: denied { lock } for pid=10443 comm="syz.5.1263" path="/167/file0/file1" dev="9p" ino=38928605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.526453][T10475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10475 comm=syz.1.1273 [ 140.619162][ T78] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 140.783973][T10492] /dev/sr0: Can't open blockdev [ 140.905643][T10491] /dev/sr0: Can't open blockdev [ 141.327790][T10513] syz.5.1282: vmalloc error: size 3383414784, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.331619][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.5.1282 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 141.334467][T10513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.337177][T10513] Call Trace: [ 141.338035][T10513] [ 141.338773][T10513] dump_stack_lvl+0x16c/0x1f0 [ 141.340013][T10513] warn_alloc+0x24d/0x3a0 [ 141.341144][T10513] ? __pfx_warn_alloc+0x10/0x10 [ 141.342417][T10513] ? __pfx_stack_trace_save+0x10/0x10 [ 141.343828][T10513] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 141.345304][T10513] ? kasan_save_stack+0x42/0x60 [ 141.346570][T10513] ? kasan_save_stack+0x33/0x60 [ 141.347873][T10513] ? kasan_save_track+0x14/0x30 [ 141.349148][T10513] ? __kasan_kmalloc+0xaa/0xb0 [ 141.350387][T10513] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 141.351703][T10513] ? vb2_core_create_bufs+0x55d/0xab0 [ 141.353145][T10513] ? vb2_create_bufs+0x566/0x780 [ 141.354420][T10513] ? v4l_create_bufs+0x156/0x270 [ 141.355702][T10513] __vmalloc_node_range_noprof+0x10df/0x1530 [ 141.357278][T10513] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 141.358594][T10513] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.360235][T10513] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 141.361680][T10513] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 141.363088][T10513] vmalloc_user_noprof+0x6b/0x90 [ 141.364392][T10513] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 141.365733][T10513] vb2_vmalloc_alloc+0x11e/0x3d0 [ 141.367066][T10513] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 141.368478][T10513] __vb2_queue_alloc+0x896/0x1230 [ 141.369699][T10513] vb2_core_create_bufs+0x55d/0xab0 [ 141.371258][T10513] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 141.372737][T10513] ? rcu_is_watching+0x12/0xc0 [ 141.373995][T10513] ? trace_contention_end+0xee/0x140 [ 141.375371][T10513] vb2_create_bufs+0x566/0x780 [ 141.376621][T10513] ? __pfx_vb2_create_bufs+0x10/0x10 [ 141.377987][T10513] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.379517][T10513] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.381048][T10513] v4l_create_bufs+0x156/0x270 [ 141.382315][T10513] __video_do_ioctl+0xaf0/0xf00 [ 141.383580][T10513] ? __pfx___video_do_ioctl+0x10/0x10 [ 141.384970][T10513] ? __might_fault+0xe3/0x190 [ 141.386193][T10513] video_usercopy+0x4d2/0x1620 [ 141.387447][T10513] ? __pfx___video_do_ioctl+0x10/0x10 [ 141.388861][T10513] ? __pfx_video_usercopy+0x10/0x10 [ 141.390210][T10513] v4l2_ioctl+0x1ba/0x250 [ 141.391327][T10513] ? __pfx_v4l2_ioctl+0x10/0x10 [ 141.392601][T10513] __x64_sys_ioctl+0x190/0x200 [ 141.393847][T10513] do_syscall_64+0xcd/0x250 [ 141.395024][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.396545][T10513] RIP: 0033:0x7f2d3cb85d29 [ 141.397697][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.402682][T10513] RSP: 002b:00007f2d3da2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.404814][T10513] RAX: ffffffffffffffda RBX: 00007f2d3cd75fa0 RCX: 00007f2d3cb85d29 [ 141.406846][T10513] RDX: 00000000200004c0 RSI: 00000000c100565c RDI: 0000000000000007 [ 141.409128][T10513] RBP: 00007f2d3cc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 141.411183][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.413466][T10513] R13: 0000000000000000 R14: 00007f2d3cd75fa0 R15: 00007ffc7e257c88 [ 141.415541][T10513] [ 141.416476][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.420171][T10513] Mem-Info: [ 141.423011][T10513] active_anon:2221 inactive_anon:4748 isolated_anon:0 [ 141.423011][T10513] active_file:0 inactive_file:55283 isolated_file:0 [ 141.423011][T10513] unevictable:3304 dirty:303 writeback:31 [ 141.423011][T10513] slab_reclaimable:7412 slab_unreclaimable:80030 [ 141.423011][T10513] mapped:25034 shmem:4017 pagetables:753 [ 141.423011][T10513] sec_pagetables:300 bounce:0 [ 141.423011][T10513] kernel_misc_reclaimable:0 [ 141.423011][T10513] free:454942 free_pcp:6251 free_cma:0 [ 141.434898][T10513] Node 0 active_anon:8884kB inactive_anon:18992kB active_file:0kB inactive_file:221060kB unevictable:9680kB isolated(anon):0kB isolated(file):0kB mapped:100136kB dirty:1208kB writeback:0kB shmem:12532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:3012kB sec_pagetables:1200kB all_unreclaimable? yes [ 141.443812][T10513] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 141.451853][T10513] Node 0 DMA free:14904kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:84kB free_cma:0kB [ 141.454906][T10515] x_tables: duplicate underflow at hook 2 [ 141.459243][T10513] lowmem_reserve[]: 0 1212 0 0 0 [ 141.459287][T10513] Node 0 DMA32 free:222764kB boost:12288kB min:39896kB low:46796kB high:53696kB reserved_highatomic:0KB active_anon:8884kB inactive_anon:18992kB active_file:0kB inactive_file:221060kB unevictable:9680kB writepending:1332kB present:2080628kB managed:1269908kB mlocked:6144kB bounce:0kB free_pcp:20160kB local_pcp:10244kB free_cma:0kB [ 141.459318][T10513] lowmem_reserve[]: 0 0 0 0 0 [ 141.459341][T10513] Node 1 Normal free:1581836kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:4696kB local_pcp:96kB free_cma:0kB [ 141.459372][T10513] lowmem_reserve[]: 0 0 0 0 0 [ 141.459393][T10513] Node 0 DMA: 20*4kB (U) 23*8kB (U) 23*16kB (U) 22*32kB (U) 12*64kB (U) 14*128kB (U) 9*256kB (U) 5*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 14904kB [ 141.484005][T10513] Node 0 DMA32: 305*4kB (UM) 304*8kB (UME) 340*16kB (UME) 384*32kB (UME) 300*64kB (UE) 170*128kB (UE) 130*256kB (UME) 98*512kB (UM) 71*1024kB (U) 2*2048kB (U) 0*4096kB = 222596kB [ 141.488682][T10513] Node 1 Normal: 93*4kB (UME) 163*8kB (UME) 170*16kB (UME) 291*32kB (UME) 213*64kB (UME) 165*128kB (UME) 148*256kB (UE) 147*512kB (UME) 137*1024kB (UE) 5*2048kB (UME) 310*4096kB (M) = 1581900kB [ 141.494599][T10513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.498209][T10513] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.500613][T10513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.502832][T10513] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.505417][T10513] 59517 total pagecache pages [ 141.506682][T10513] 217 pages in swap cache [ 141.508384][T10513] Free swap = 123220kB [ 141.509505][T10513] Total swap = 124996kB [ 141.510647][T10513] 1048443 pages RAM [ 141.511799][T10513] 0 pages HighMem/MovableOnly [ 141.513043][T10513] 281645 pages reserved [ 141.514115][T10513] 0 pages cma reserved [ 141.560558][ T39] audit: type=1400 audit(1734908354.240:775): avc: denied { unmount } for pid=10519 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.561720][ T5983] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 141.608348][T10522] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 141.714294][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 141.717213][ T5983] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.719860][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.722533][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.725330][ T5983] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.728675][ T5983] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.731418][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.865261][T10530] netlink: 'syz.5.1287': attribute type 21 has an invalid length. [ 141.867867][T10530] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1287'. [ 141.870364][T10530] netlink: 'syz.5.1287': attribute type 4 has an invalid length. [ 141.872540][T10530] netlink: 'syz.5.1287': attribute type 5 has an invalid length. [ 141.874595][T10530] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1287'. [ 141.927244][T10510] cgroup2: Unknown parameter 'euid' [ 141.929612][ T5983] usb 6-1: GET_CAPABILITIES returned 0 [ 141.931070][ T5983] usbtmc 6-1:16.0: can't read capabilities [ 141.951525][T10532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10532 comm=syz.5.1288 [ 142.125654][ T5983] usb 6-1: USB disconnect, device number 23 [ 142.133609][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 142.286022][ T39] audit: type=1400 audit(1734908354.996:776): avc: denied { create } for pid=10536 comm="syz.5.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.292927][ T39] audit: type=1400 audit(1734908354.996:777): avc: denied { ioctl } for pid=10536 comm="syz.5.1290" path="socket:[36467]" dev="sockfs" ino=36467 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.316531][ T39] audit: type=1400 audit(1734908355.038:778): avc: denied { create } for pid=10536 comm="syz.5.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 142.531340][T10551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10551 comm=syz.0.1293 [ 142.670314][T10566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10566 comm=syz.5.1297 [ 142.678680][T10566] netlink: 'syz.5.1297': attribute type 1 has an invalid length. [ 142.686690][T10566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.821649][T10584] /dev/sr0: Can't open blockdev [ 142.960195][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1305'. [ 142.997069][T10607] xt_hashlimit: size too large, truncated to 1048576 [ 143.070586][T10613] xt_hashlimit: size too large, truncated to 1048576 [ 143.219319][ T71] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 143.383071][ T71] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.385732][ T71] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.388334][ T71] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.392701][ T71] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 143.395278][ T71] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.399026][ T71] usb 10-1: config 0 descriptor?? [ 143.815915][T10635] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1315'. [ 143.852522][ T71] usbhid 10-1:0.0: can't add hid device: -71 [ 143.854280][ T71] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 143.857161][ T71] usb 10-1: USB disconnect, device number 5 [ 144.048745][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'. [ 144.051764][ T39] audit: type=1400 audit(1734908356.854:779): avc: denied { getopt } for pid=10652 comm="syz.1.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.223541][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 144.396268][ T39] audit: type=1400 audit(1734908357.222:780): avc: denied { append } for pid=10678 comm="syz.5.1328" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.448165][T10684] netlink: 'syz.5.1330': attribute type 2 has an invalid length. [ 144.450277][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1330'. [ 144.482888][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'. [ 144.945581][T10716] xt_NFQUEUE: number of total queues is 0 [ 144.979737][T10716] netlink: 'syz.5.1341': attribute type 9 has an invalid length. [ 144.981978][T10716] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1341'. [ 145.161504][T10727] netlink: 'syz.5.1344': attribute type 1 has an invalid length. [ 145.174164][T10727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.321425][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10745 comm=syz.5.1349 [ 145.329557][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10745 comm=syz.5.1349 [ 145.332842][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10745 comm=syz.5.1349 [ 145.343393][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=10745 comm=syz.5.1349 [ 145.346886][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10745 comm=syz.5.1349 [ 145.433094][T10759] ebt_among: src integrity fail: 300 [ 145.434934][T10759] futex_wake_op: syz.1.1354 tries to shift op by -1; fix this program [ 145.443190][T10761] netlink: 'syz.5.1355': attribute type 1 has an invalid length. [ 145.463391][T10761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.466121][T10764] netlink: 'syz.1.1356': attribute type 13 has an invalid length. [ 145.551287][T10775] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1360'. [ 145.744330][T10792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 145.804420][T10808] ./file0: Can't lookup blockdev [ 145.832302][T10803] IPVS: Error connecting to the multicast addr [ 145.835980][ T39] audit: type=1400 audit(1734908358.723:781): avc: denied { listen } for pid=10809 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.836197][T10810] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=10810 comm=syz.1.1370 [ 145.858180][T10806] tipc: Enabled bearer , priority 10 [ 145.935085][T10816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.077749][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 146.114502][T10826] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 146.115314][ T71] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 146.117764][T10826] SELinux: failed to load policy [ 146.243926][T10829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.269323][ T71] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.272542][ T71] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.275307][ T71] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.279069][ T71] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.281696][ T71] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 146.284060][ T71] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.288731][ T71] hub 6-1:1.0: bad descriptor, ignoring hub [ 146.290673][ T71] hub 6-1:1.0: probe with driver hub failed with error -5 [ 146.293610][ T71] cdc_wdm 6-1:1.0: skipping garbage [ 146.295021][ T71] cdc_wdm 6-1:1.0: skipping garbage [ 146.298323][ T71] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 146.300472][ T71] cdc_wdm 6-1:1.0: Unknown control protocol [ 146.402158][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1379'. [ 146.404468][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1379'. [ 146.409287][T10835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1379'. [ 146.416236][T10835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1379'. [ 146.531221][T10842] validate_nla: 1 callbacks suppressed [ 146.531232][T10842] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 146.535456][T10842] netlink: 'syz.0.1381': attribute type 2 has an invalid length. [ 146.539466][T10842] openvswitch: netlink: Missing key (keys=40, expected=80) [ 146.591309][ T72] usb 6-1: USB disconnect, device number 24 [ 146.696124][ T5947] Bluetooth: hci0: command 0x1003 tx timeout [ 146.698955][ T5951] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.815272][T10858] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 146.839704][T10858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.905544][ T72] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 146.908614][T10865] overlayfs: lower data-only dirs require metacopy support. [ 146.985774][T10875] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 146.998978][T10875] team0: Port device added [ 147.049598][ T72] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 147.052552][ T72] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.055240][ T72] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.059157][ T72] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 147.061560][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.065934][ T72] hub 6-1:1.0: bad descriptor, ignoring hub [ 147.067677][ T72] hub 6-1:1.0: probe with driver hub failed with error -5 [ 147.070012][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 147.071498][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 147.072888][ T72] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 147.259339][T10885] team0: Device gtp0 is of different type [ 147.383081][ T71] usb 6-1: USB disconnect, device number 25 [ 147.554165][ T39] audit: type=1400 audit(1734908360.539:782): avc: denied { accept } for pid=10886 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.776460][T10898] netlink: 'syz.1.1400': attribute type 4 has an invalid length. [ 147.785956][T10898] netlink: 'syz.1.1400': attribute type 4 has an invalid length. [ 147.817031][ T39] audit: type=1400 audit(1734908360.812:783): avc: denied { listen } for pid=10899 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 147.822377][ T39] audit: type=1400 audit(1734908360.812:784): avc: denied { accept } for pid=10899 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 147.897432][T10908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10908 comm=syz.5.1402 [ 147.903415][T10908] netlink: 'syz.5.1402': attribute type 1 has an invalid length. [ 147.917898][ T39] audit: type=1400 audit(1734908360.917:785): avc: denied { write } for pid=10910 comm="syz.0.1403" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.426280][T10938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10938 comm=syz.5.1413 [ 148.431578][T10938] netlink: 'syz.5.1413': attribute type 1 has an invalid length. [ 148.614319][T10948] random: crng reseeded on system resumption [ 148.766667][T10955] ip6t_srh: unknown srh match flags 4000 [ 148.835539][T10964] overlayfs: failed to resolve './file0': -2 [ 149.204399][T10985] netlink: 'syz.0.1427': attribute type 16 has an invalid length. [ 149.230107][T10987] fuse: Unknown parameter '~GԞ00000000000000000000' [ 149.234530][T10987] __nla_validate_parse: 3 callbacks suppressed [ 149.234540][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 149.241113][T10987] macsec0: entered promiscuous mode [ 149.332802][ T39] audit: type=1400 audit(1734908362.397:786): avc: denied { nlmsg_write } for pid=10988 comm="syz.5.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 149.507334][T11002] syz.0.1433: attempt to access beyond end of device [ 149.507334][T11002] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 149.511258][T11002] efs: cannot read volume header [ 149.615647][ T39] audit: type=1400 audit(1734908362.702:787): avc: denied { map } for pid=11014 comm="syz.1.1437" path="socket:[42041]" dev="sockfs" ino=42041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 149.772640][T11032] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 149.775097][T11032] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 149.776992][T11032] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 149.779121][T11032] bond0: (slave wlan1): Opening slave failed [ 149.800133][T11035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11035 comm=syz.1.1443 [ 149.910326][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.916023][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.962636][ T39] audit: type=1400 audit(1734908363.058:788): avc: denied { bind } for pid=11059 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.970044][T11060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1450'. [ 149.974745][T11060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 150.097235][ T39] audit: type=1400 audit(1734908363.205:789): avc: denied { override_creds } for pid=11062 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.142240][ T39] audit: type=1400 audit(1734908363.247:790): avc: denied { write } for pid=11070 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.153317][ T72] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 150.204762][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'. [ 150.207261][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'. [ 150.226363][T11087] sp0: Synchronizing with TNC [ 150.231728][T11087] binder: BC_ACQUIRE_RESULT not supported [ 150.233314][T11087] binder: 11086:11087 ioctl c0306201 20000600 returned -22 [ 150.273402][ T39] audit: type=1400 audit(1734908363.384:791): avc: denied { remount } for pid=11088 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.337863][T11094] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1459'. [ 150.365878][T11097] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 151.192365][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 151.223249][T11111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.299829][ T5951] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 151.303892][ T5951] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 151.400929][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1472'. [ 151.403941][T11132] netlink: 'syz.4.1472': attribute type 25 has an invalid length. [ 151.414031][T11132] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.416501][T11132] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.418733][T11132] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.421188][T11132] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.421434][ T39] audit: type=1400 audit(1734908364.591:792): avc: denied { execute } for pid=11127 comm="syz.0.1470" path="/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 151.564318][ T6163] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 151.708204][ T6163] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.710913][ T6163] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.713275][ T6163] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.716420][ T6163] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.716498][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.718936][ T6163] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.723656][ T6163] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.723769][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.728268][ T6163] hub 10-1:1.0: bad descriptor, ignoring hub [ 151.730135][ T6163] hub 10-1:1.0: probe with driver hub failed with error -5 [ 151.732407][ T6163] cdc_wdm 10-1:1.0: skipping garbage [ 151.733790][ T6163] cdc_wdm 10-1:1.0: skipping garbage [ 151.736093][ T6163] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 151.736148][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.737676][ T6163] cdc_wdm 10-1:1.0: Unknown control protocol [ 151.744288][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.746845][ T5941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.749171][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.862441][T11135] chnl_net:caif_netlink_parms(): no params data found [ 151.930621][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.933366][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.936030][T11135] bridge_slave_0: entered allmulticast mode [ 151.939026][T11135] bridge_slave_0: entered promiscuous mode [ 151.942112][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.944012][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.945995][T11135] bridge_slave_1: entered allmulticast mode [ 151.949920][T11135] bridge_slave_1: entered promiscuous mode [ 151.981786][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.986945][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.027864][T11135] team0: Port device team_slave_0 added [ 152.030552][ T6163] usb 10-1: USB disconnect, device number 6 [ 152.033872][T11135] team0: Port device team_slave_1 added [ 152.062929][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.064769][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.071553][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.075060][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.076839][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.083313][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.107000][T11135] hsr_slave_0: entered promiscuous mode [ 152.109148][T11135] hsr_slave_1: entered promiscuous mode [ 152.111543][T11135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.114184][T11135] Cannot create hsr debugfs directory [ 152.218044][T11135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.301642][T11135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.344158][ T39] audit: type=1400 audit(1734908365.557:793): avc: denied { getopt } for pid=11150 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.349505][ T72] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 152.389062][T11135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.396038][T11156] netlink: 'syz.4.1478': attribute type 4 has an invalid length. [ 152.492268][T11126] tmpfs: Bad value for 'mpol' [ 152.495167][ T72] usb 10-1: unable to get BOS descriptor or descriptor too short [ 152.503210][ T72] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 152.506104][ T72] usb 10-1: can't read configurations, error -71 [ 152.519818][T11135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.523941][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 152.539132][T11163] vlan2: entered allmulticast mode [ 152.653339][T11135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.656738][T11135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.659850][T11135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.662738][T11135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.705480][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.715709][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.721477][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.723229][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.729069][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.730919][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.772560][ T39] audit: type=1400 audit(1734908366.008:794): avc: denied { sendto } for pid=6163 comm="kworker/1:4" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 152.846433][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.872611][T11135] veth0_vlan: entered promiscuous mode [ 152.876650][T11135] veth1_vlan: entered promiscuous mode [ 152.894390][T11135] veth0_macvtap: entered promiscuous mode [ 152.900020][T11135] veth1_macvtap: entered promiscuous mode [ 152.909105][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.912456][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.915509][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.919215][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.922338][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.925708][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.928988][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.932369][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.936407][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.941979][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.946166][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.949327][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.952521][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.955731][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.959129][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.962241][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.965672][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.969541][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.977258][T11135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.980104][T11135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.982926][T11135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.986104][T11135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.070606][T11181] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 153.084335][T11182] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 153.086887][T11181] IPVS: stopping backup sync thread 11182 ... [ 153.193195][T11185] Bluetooth: MGMT ver 1.23 [ 153.251037][ T5941] Bluetooth: hci3: command 0x0419 tx timeout [ 153.253224][ T5951] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 153.257951][T11166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.259775][T11166] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.263915][T11166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.265440][T11166] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.267707][T11166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.269475][T11166] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 153.271677][T11166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.273250][T11166] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 153.294592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.296703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.310136][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.312131][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.370422][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11192 comm=syz.4.1488 [ 153.402468][T11190] vlan0: entered allmulticast mode [ 153.404494][T11190] vlan1: entered allmulticast mode [ 153.406342][T11190] veth0_vlan: entered allmulticast mode [ 153.409567][T11190] bridge0: port 3(vlan0) entered blocking state [ 153.412415][T11190] bridge0: port 3(vlan0) entered disabled state [ 153.415515][T11190] vlan0: entered promiscuous mode [ 153.417263][T11190] vlan1: entered promiscuous mode [ 153.419702][T11190] bridge0: port 3(vlan0) entered blocking state [ 153.421998][T11190] bridge0: port 3(vlan0) entered forwarding state [ 153.427516][T11195] 9p: Unknown Cache mode or invalid value fsca [ 153.481009][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1490'. [ 153.694489][T11207] block nbd4: shutting down sockets [ 153.865196][T11225] ip6t_srh: unknown srh match flags B153 [ 153.876474][ T39] audit: type=1400 audit(1734908367.163:795): avc: denied { shutdown } for pid=11229 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.952543][T11231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.897150][ T5941] Bluetooth: hci0: sending frame failed (-49) [ 154.901540][ T5951] Bluetooth: hci0: Entering manufacturer mode failed (-49) [ 155.275572][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.340913][T11253] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 1, id = 0 [ 155.345679][ T39] audit: type=1400 audit(1734908368.717:796): avc: denied { ioctl } for pid=11251 comm="syz.4.1506" path="socket:[44268]" dev="sockfs" ino=44268 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.347237][T11252] hugetlbfs: Unknown parameter 'nr_inod' [ 155.354121][ T39] audit: type=1400 audit(1734908368.717:797): avc: denied { remount } for pid=11251 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 155.365714][ T39] audit: type=1400 audit(1734908368.738:798): avc: denied { mounton } for pid=11251 comm="syz.4.1506" path="/270/file0" dev="hugetlbfs" ino=44276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 155.366659][T11252] 9p: Unknown uid 00000000004294967295 [ 155.414198][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.414903][ T39] audit: type=1400 audit(1734908368.790:799): avc: denied { write } for pid=11251 comm="syz.4.1506" path="socket:[44268]" dev="sockfs" ino=44268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.419820][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.428384][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.434288][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.438298][ T5941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.446122][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.446976][T11256] Process accounting resumed [ 155.467550][T11261] 9p: Unknown Cache mode or invalid value fscach [ 155.536241][T11254] chnl_net:caif_netlink_parms(): no params data found [ 155.564126][ T39] audit: type=1400 audit(1734908368.937:800): avc: denied { setopt } for pid=11270 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.584972][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.586790][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.588604][T11254] bridge_slave_0: entered allmulticast mode [ 155.590882][T11254] bridge_slave_0: entered promiscuous mode [ 155.596776][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.598969][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.601273][T11254] bridge_slave_1: entered allmulticast mode [ 155.603733][T11254] bridge_slave_1: entered promiscuous mode [ 155.616656][T11278] __nla_validate_parse: 1 callbacks suppressed [ 155.616670][T11278] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1509'. [ 155.629609][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.630595][T11272] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.635018][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.660497][T11254] team0: Port device team_slave_0 added [ 155.663806][T11254] team0: Port device team_slave_1 added [ 155.689762][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.691507][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.699073][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.702765][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.704517][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.711179][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.744283][T11254] hsr_slave_0: entered promiscuous mode [ 155.753231][T11254] hsr_slave_1: entered promiscuous mode [ 155.755050][T11254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.758047][T11254] Cannot create hsr debugfs directory [ 155.974208][ T5983] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.128552][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.130977][ T5983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.134198][ T5983] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.136754][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.140017][ T5983] usb 5-1: config 0 descriptor?? [ 156.142831][ T5983] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 156.392890][ T5983] usb 5-1: USB disconnect, device number 8 [ 156.757666][ T39] audit: type=1400 audit(1734908370.197:801): avc: denied { mounton } for pid=11292 comm="syz.5.1514" path="/250/file0" dev="proc" ino=4026534155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 156.797588][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 156.876047][T11299] 9p: Unknown Cache mode or invalid value fscach [ 156.949890][ T39] audit: type=1400 audit(1734908370.397:802): avc: denied { listen } for pid=11300 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 157.051187][ T5979] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 157.058525][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.062256][T11307] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 157.064961][T11308] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 157.065997][ T39] audit: type=1400 audit(1734908370.523:803): avc: denied { relabelto } for pid=11306 comm="syz.5.1520" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_cache_t:s0" [ 157.075561][ T39] audit: type=1400 audit(1734908370.523:804): avc: denied { associate } for pid=11306 comm="syz.5.1520" name="cachefiles" dev="devtmpfs" ino=4 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_cache_t:s0" [ 157.154780][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.223174][T11324] delete_channel: no stack [ 157.258403][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.336364][ T78] bridge_slave_1: left allmulticast mode [ 157.338016][ T78] bridge_slave_1: left promiscuous mode [ 157.340260][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.343206][ T78] bridge_slave_0: left allmulticast mode [ 157.344811][ T78] bridge_slave_0: left promiscuous mode [ 157.346387][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.365360][ T5941] Bluetooth: hci0: command tx timeout [ 157.650290][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.655561][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.660329][ T78] bond0 (unregistering): Released all slaves [ 158.081614][T11334] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 158.084828][T11335] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 158.104824][ T78] hsr_slave_0: left promiscuous mode [ 158.107082][ T78] hsr_slave_1: left promiscuous mode [ 158.114086][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.116253][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.120099][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.122253][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.141197][ T39] audit: type=1800 audit(1734908371.646:805): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1526" name="/newroot/407/file0" dev="tmpfs" ino=2242 res=0 errno=0 [ 158.165862][ T78] veth1_macvtap: left promiscuous mode [ 158.167620][ T78] veth0_macvtap: left promiscuous mode [ 158.169265][ T78] veth1_vlan: left promiscuous mode [ 158.170747][ T78] veth0_vlan: left promiscuous mode [ 159.060755][ T78] team0 (unregistering): Port device team_slave_1 removed [ 159.169896][ T78] team0 (unregistering): Port device team_slave_0 removed [ 159.346591][ T5941] Bluetooth: hci0: command tx timeout [ 159.848900][T11254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.855417][T11254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.863030][T11254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.866354][T11254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.932135][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.942689][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.960293][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.962436][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.977767][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.979886][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.064844][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.083643][T11254] veth0_vlan: entered promiscuous mode [ 160.088169][T11254] veth1_vlan: entered promiscuous mode [ 160.089848][ T5943] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 160.105365][T11254] veth0_macvtap: entered promiscuous mode [ 160.110339][T11254] veth1_macvtap: entered promiscuous mode [ 160.119692][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.123536][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.126109][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.129938][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.132469][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.135225][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.138338][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.141949][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.146442][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.151983][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.155423][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.160365][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.163704][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.166949][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.170351][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.173521][T11254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.177020][T11254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.181012][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.196400][T11254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.199224][T11254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.202081][T11254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.205310][T11254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.250148][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.251332][ T5943] usb 9-1: Using ep0 maxpacket: 32 [ 160.252818][ T5943] usb 9-1: config 1 interface 0 has no altsetting 0 [ 160.253009][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.259389][ T5943] usb 9-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40 [ 160.262443][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.263413][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.264526][ T5943] usb 9-1: Product: Р [ 160.264536][ T5943] usb 9-1: Manufacturer: 㸭 [ 160.264544][ T5943] usb 9-1: SerialNumber: ࠐ [ 160.270608][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.460494][ T5943] usbhid 9-1:1.0: can't add hid device: -71 [ 160.462365][ T5943] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 160.465008][ T5943] usb 9-1: USB disconnect, device number 15 [ 160.570903][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 160.570917][ T39] audit: type=1400 audit(1734908374.197:807): avc: denied { read } for pid=11388 comm="syz.5.1539" name="file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.584357][ T39] audit: type=1400 audit(1734908374.197:808): avc: denied { connect } for pid=11388 comm="syz.5.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.837091][T11404] ip6t_srh: unknown srh invflags 7D00 [ 160.941148][T11415] vlan2: entered allmulticast mode [ 160.942463][T11415] vlan1: entered allmulticast mode [ 160.943989][T11415] veth0_vlan: entered allmulticast mode [ 160.949110][T11415] bridge0: port 3(vlan2) entered blocking state [ 160.950708][T11415] bridge0: port 3(vlan2) entered disabled state [ 160.952755][T11415] vlan2: entered promiscuous mode [ 160.954049][T11415] vlan1: entered promiscuous mode [ 160.956575][T11415] bridge0: port 3(vlan2) entered blocking state [ 160.958308][T11415] bridge0: port 3(vlan2) entered forwarding state [ 160.980119][T11420] block nbd5: not configured, cannot reconfigure [ 161.014824][T11421] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 161.193655][ T39] audit: type=1400 audit(1734908374.848:809): avc: denied { append } for pid=11436 comm="syz.4.1556" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 161.428692][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 161.431701][T11445] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1558'. [ 161.576077][T11463] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1562'. [ 161.809915][ T39] audit: type=1400 audit(1734908375.499:810): avc: denied { mounton } for pid=11473 comm="syz.4.1566" path="/285/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 162.159460][ T39] audit: type=1400 audit(1734908375.866:811): avc: denied { remove_name } for pid=11486 comm="syz.5.1570" name="file0" dev="9p" ino=38928604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.169422][ T39] audit: type=1400 audit(1734908375.866:812): avc: denied { rename } for pid=11486 comm="syz.5.1570" name="file0" dev="9p" ino=38928604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.178027][ T39] audit: type=1400 audit(1734908375.887:813): avc: denied { create } for pid=11486 comm="syz.5.1570" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 162.239679][ T104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.435194][ T35] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 162.450992][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.454897][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.457568][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.464254][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.467494][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.470060][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.577126][T11489] chnl_net:caif_netlink_parms(): no params data found [ 162.596193][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.598880][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.601330][ T35] usb 10-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 162.603570][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.609026][ T35] usb 10-1: config 0 descriptor?? [ 162.650303][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.652973][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.655098][T11489] bridge_slave_0: entered allmulticast mode [ 162.657309][T11489] bridge_slave_0: entered promiscuous mode [ 162.664536][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.666582][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.668499][T11489] bridge_slave_1: entered allmulticast mode [ 162.670756][T11489] bridge_slave_1: entered promiscuous mode [ 162.707460][ T39] audit: type=1400 audit(1734908376.433:814): avc: denied { watch } for pid=11503 comm="syz.4.1574" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 162.710305][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.714591][ T39] audit: type=1400 audit(1734908376.433:815): avc: denied { watch_sb watch_reads } for pid=11503 comm="syz.4.1574" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 162.718019][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.759458][T11489] team0: Port device team_slave_0 added [ 162.762580][T11489] team0: Port device team_slave_1 added [ 162.798109][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.799989][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.804855][T11487] netlink: 'syz.5.1570': attribute type 1 has an invalid length. [ 162.807410][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.811549][T11487] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1570'. [ 162.812007][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.815530][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.822463][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.856319][T11489] hsr_slave_0: entered promiscuous mode [ 162.858229][T11489] hsr_slave_1: entered promiscuous mode [ 162.862102][T11489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.864389][T11489] Cannot create hsr debugfs directory [ 162.928181][T11514] 9pnet_virtio: no channels available for device syz [ 162.930045][ T39] audit: type=1400 audit(1734908376.674:816): avc: denied { mounton } for pid=11486 comm="syz.5.1570" path="/279/file0/file0" dev="9p" ino=38928703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 162.956449][T11509] random: crng reseeded on system resumption [ 163.965990][ T104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.023557][ T104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.030558][T11517] 9pnet_virtio: no channels available for device syz [ 164.058671][T11517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 164.094462][ T104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.174808][T11527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11527 comm=syz.0.1580 [ 164.220671][ T104] bridge_slave_1: left allmulticast mode [ 164.222195][ T104] bridge_slave_1: left promiscuous mode [ 164.224838][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.230538][ T104] bridge_slave_0: left allmulticast mode [ 164.232450][ T104] bridge_slave_0: left promiscuous mode [ 164.234510][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.395278][T11529] 9pnet_virtio: no channels available for device syz [ 164.462769][ T5951] Bluetooth: hci0: command tx timeout [ 164.569648][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.574651][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.579663][ T104] bond0 (unregistering): Released all slaves [ 164.688055][T11550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 164.701946][T11550] kvm: pic: non byte read [ 164.703988][T11550] kvm: pic: level sensitive irq not supported [ 164.704313][T11550] kvm: pic: non byte read [ 164.708373][T11550] kvm: pic: level sensitive irq not supported [ 164.708622][T11550] kvm: pic: non byte read [ 164.715596][T11550] kvm: pic: level sensitive irq not supported [ 164.715993][T11550] kvm: pic: non byte read [ 164.871441][T11560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11560 comm=syz.0.1589 [ 164.875135][ T104] hsr_slave_0: left promiscuous mode [ 164.875706][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1589'. [ 164.879839][ T104] hsr_slave_1: left promiscuous mode [ 164.882197][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.884080][ T104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.886298][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.888167][ T104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.919842][ T104] veth1_macvtap: left promiscuous mode [ 164.921417][ T104] veth0_macvtap: left promiscuous mode [ 164.922828][ T104] veth1_vlan: left promiscuous mode [ 164.924180][ T104] veth0_vlan: left promiscuous mode [ 165.047183][ T35] usbhid 10-1:0.0: can't add hid device: -71 [ 165.049006][ T35] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 165.062812][ T35] usb 10-1: USB disconnect, device number 9 [ 165.797744][ T104] team0 (unregistering): Port device team_slave_1 removed [ 165.916897][ T104] team0 (unregistering): Port device team_slave_0 removed [ 166.434560][ T5951] Bluetooth: hci0: command tx timeout [ 166.558028][T11489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.562774][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 166.563258][T11489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.571502][T11489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.589404][T11489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.642290][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.649935][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.658236][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.660346][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.667233][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.669060][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.702297][T11571] [ 166.702960][T11571] ====================================================== [ 166.704714][T11571] WARNING: possible circular locking dependency detected [ 166.706463][T11489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.706484][T11571] 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Not tainted [ 166.710701][T11489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 166.712558][T11571] ------------------------------------------------------ [ 166.717670][T11571] syz.5.1592/11571 is trying to acquire lock: [ 166.719736][T11571] ffff8880263f98b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 166.722880][T11571] [ 166.722880][T11571] but task is already holding lock: [ 166.725337][T11571] ffff888106feb6c0 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.728734][T11571] [ 166.728734][T11571] which lock already depends on the new lock. [ 166.728734][T11571] [ 166.732097][T11571] [ 166.732097][T11571] the existing dependency chain (in reverse order) is: [ 166.735085][T11571] [ 166.735085][T11571] -> #5 (&q->sysfs_lock){+.+.}-{4:4}: [ 166.737606][T11571] __mutex_lock+0x19b/0xa60 [ 166.739301][T11571] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.741491][T11571] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.743513][T11571] nbd_start_device+0x15b/0xd70 [ 166.745331][T11571] nbd_ioctl+0x21a/0xfd0 [ 166.746993][T11571] blkdev_ioctl+0x276/0x6d0 [ 166.748733][T11571] __x64_sys_ioctl+0x190/0x200 [ 166.750522][T11571] do_syscall_64+0xcd/0x250 [ 166.752239][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.754398][T11571] [ 166.754398][T11571] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 166.757308][T11571] blk_mq_submit_bio+0x1fb6/0x24c0 [ 166.759210][T11571] __submit_bio+0x384/0x540 [ 166.760910][T11571] submit_bio_noacct_nocheck+0x698/0xd70 [ 166.762965][T11571] submit_bio_noacct+0x93a/0x1e20 [ 166.764817][T11571] mpage_readahead+0x41d/0x590 [ 166.766603][T11571] read_pages+0x1a8/0xdc0 [ 166.768208][T11571] page_cache_ra_unbounded+0x3dc/0x750 [ 166.770147][T11571] force_page_cache_ra+0x24b/0x340 [ 166.771978][T11571] page_cache_sync_ra+0x110/0x9c0 [ 166.773790][T11571] filemap_get_pages+0xd7b/0x1be0 [ 166.775593][T11571] filemap_read+0x3ca/0xd70 [ 166.777259][T11571] blkdev_read_iter+0x187/0x480 [ 166.779107][T11571] vfs_read+0x87f/0xbe0 [ 166.780655][T11571] ksys_read+0x12b/0x250 [ 166.782221][T11571] do_syscall_64+0xcd/0x250 [ 166.783814][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.785865][T11571] [ 166.785865][T11571] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 166.788581][T11571] down_read+0x9a/0x330 [ 166.790110][T11571] filemap_fault+0x62c/0x2820 [ 166.791804][T11571] __do_fault+0x10a/0x490 [ 166.793384][T11571] do_pte_missing+0xebd/0x3e00 [ 166.795147][T11571] __handle_mm_fault+0x103c/0x2a40 [ 166.797082][T11571] handle_mm_fault+0x3fa/0xaa0 [ 166.798881][T11571] do_user_addr_fault+0x7a3/0x13f0 [ 166.800749][T11571] exc_page_fault+0x5c/0xc0 [ 166.802419][T11571] asm_exc_page_fault+0x26/0x30 [ 166.804197][T11571] _copy_from_user+0x95/0xd0 [ 166.805901][T11571] copy_msghdr_from_user+0x99/0x160 [ 166.807801][T11571] ___sys_recvmsg+0xdc/0x1a0 [ 166.809540][T11571] do_recvmmsg+0x2f8/0x740 [ 166.811211][T11571] __x64_sys_recvmmsg+0x239/0x290 [ 166.813054][T11571] do_syscall_64+0xcd/0x250 [ 166.814737][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.816907][T11571] [ 166.816907][T11571] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 166.819453][T11571] __might_fault+0x11b/0x190 [ 166.821194][T11571] _copy_from_user+0x29/0xd0 [ 166.822944][T11571] __blk_trace_setup+0xa8/0x180 [ 166.824773][T11571] blk_trace_ioctl+0x163/0x290 [ 166.826551][T11571] blkdev_ioctl+0x109/0x6d0 [ 166.828247][T11571] __x64_sys_ioctl+0x190/0x200 [ 166.829983][T11571] do_syscall_64+0xcd/0x250 [ 166.831654][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.833772][T11571] [ 166.833772][T11571] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 166.836330][T11571] __mutex_lock+0x19b/0xa60 [ 166.837989][T11571] blk_mq_exit_sched+0xd1/0x310 [ 166.839759][T11571] elevator_disable+0xc0/0x490 [ 166.841479][T11571] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 166.843575][T11571] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.845547][T11571] nbd_start_device+0x15b/0xd70 [ 166.847296][T11571] nbd_ioctl+0x21a/0xfd0 [ 166.848852][T11571] blkdev_ioctl+0x276/0x6d0 [ 166.850542][T11571] __x64_sys_ioctl+0x190/0x200 [ 166.852296][T11571] do_syscall_64+0xcd/0x250 [ 166.853927][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.856031][T11571] [ 166.856031][T11571] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 166.858471][T11571] __lock_acquire+0x249e/0x3c40 [ 166.860215][T11571] lock_acquire.part.0+0x11b/0x380 [ 166.862011][T11571] __mutex_lock+0x19b/0xa60 [ 166.863671][T11571] elevator_disable+0xb5/0x490 [ 166.865389][T11571] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 166.867452][T11571] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.869425][T11571] nbd_start_device+0x15b/0xd70 [ 166.871161][T11571] nbd_ioctl+0x21a/0xfd0 [ 166.872688][T11571] blkdev_ioctl+0x276/0x6d0 [ 166.874300][T11571] __x64_sys_ioctl+0x190/0x200 [ 166.875982][T11571] do_syscall_64+0xcd/0x250 [ 166.877617][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.879622][T11571] [ 166.879622][T11571] other info that might help us debug this: [ 166.879622][T11571] [ 166.882845][T11571] Chain exists of: [ 166.882845][T11571] &eq->sysfs_lock --> &q->q_usage_counter(io)#52 --> &q->sysfs_lock [ 166.882845][T11571] [ 166.887223][T11571] Possible unsafe locking scenario: [ 166.887223][T11571] [ 166.889655][T11571] CPU0 CPU1 [ 166.891325][T11571] ---- ---- [ 166.893020][T11571] lock(&q->sysfs_lock); [ 166.894409][T11571] lock(&q->q_usage_counter(io)#52); [ 166.897017][T11571] lock(&q->sysfs_lock); [ 166.899135][T11571] lock(&eq->sysfs_lock); [ 166.900477][T11571] [ 166.900477][T11571] *** DEADLOCK *** [ 166.900477][T11571] [ 166.902431][T11571] 5 locks held by syz.5.1592/11571: [ 166.903684][T11571] #0: ffff8880263ec198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 166.906113][T11571] #1: ffff8880263ec0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.909351][T11571] #2: ffff888106feb190 (&q->q_usage_counter(io)#54){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 166.912455][T11571] #3: ffff888106feb1c8 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 166.915664][T11571] #4: ffff888106feb6c0 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 166.918581][T11571] [ 166.918581][T11571] stack backtrace: [ 166.920044][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.5.1592 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 166.922637][T11571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.925245][T11571] Call Trace: [ 166.926082][T11571] [ 166.926838][T11571] dump_stack_lvl+0x116/0x1f0 [ 166.928175][T11571] print_circular_bug+0x419/0x5d0 [ 166.929519][T11571] check_noncircular+0x31a/0x400 [ 166.930736][T11571] ? __pfx_check_noncircular+0x10/0x10 [ 166.932091][T11571] ? mark_held_locks+0x9f/0xe0 [ 166.933313][T11571] ? lockdep_lock+0xc6/0x200 [ 166.934463][T11571] ? __pfx_lockdep_lock+0x10/0x10 [ 166.936021][T11571] ? __lock_acquire+0xcc5/0x3c40 [ 166.937296][T11571] __lock_acquire+0x249e/0x3c40 [ 166.938761][T11571] ? __pfx___lock_acquire+0x10/0x10 [ 166.940470][T11571] ? find_held_lock+0x2d/0x110 [ 166.941914][T11571] lock_acquire.part.0+0x11b/0x380 [ 166.943438][T11571] ? elevator_disable+0xb5/0x490 [ 166.944822][T11571] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 166.946576][T11571] ? rcu_is_watching+0x12/0xc0 [ 166.947991][T11571] ? trace_lock_acquire+0x14e/0x1f0 [ 166.949608][T11571] ? elevator_disable+0xb5/0x490 [ 166.950926][T11571] ? lock_acquire+0x2f/0xb0 [ 166.952057][T11571] ? elevator_disable+0xb5/0x490 [ 166.953245][T11571] __mutex_lock+0x19b/0xa60 [ 166.954411][T11571] ? elevator_disable+0xb5/0x490 [ 166.955813][T11571] ? elevator_disable+0xb5/0x490 [ 166.957334][T11571] ? __pfx___mutex_lock+0x10/0x10 [ 166.958972][T11571] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 166.960847][T11571] ? mark_held_locks+0x9f/0xe0 [ 166.962319][T11571] ? elevator_disable+0xb5/0x490 [ 166.963806][T11571] elevator_disable+0xb5/0x490 [ 166.965130][T11571] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 166.966999][T11571] ? __mutex_trylock_common+0xea/0x250 [ 166.968730][T11571] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.970408][T11571] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.971852][T11571] ? rcu_is_watching+0x12/0xc0 [ 166.973376][T11571] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 166.975343][T11571] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.977034][T11571] ? avc_has_perm_noaudit+0x61/0x3a0 [ 166.978735][T11571] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 166.980350][T11571] ? __pfx___mutex_lock+0x10/0x10 [ 166.981751][T11571] ? trace_contention_end+0xee/0x140 [ 166.983307][T11571] ? __mutex_lock+0x1cc/0xa60 [ 166.984475][T11571] ? nbd_ioctl+0x151/0xfd0 [ 166.985567][T11571] ? __pfx___mutex_lock+0x10/0x10 [ 166.986897][T11571] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 166.988490][T11571] nbd_start_device+0x15b/0xd70 [ 166.989998][T11571] ? bpf_lsm_capable+0x9/0x10 [ 166.991455][T11571] nbd_ioctl+0x21a/0xfd0 [ 166.992625][T11571] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 166.994528][T11571] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 166.996326][T11571] ? __pfx_nbd_ioctl+0x10/0x10 [ 166.997837][T11571] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 166.999789][T11571] ? __pfx_lock_release+0x10/0x10 [ 167.001331][T11571] ? __pfx_nbd_ioctl+0x10/0x10 [ 167.002700][T11571] blkdev_ioctl+0x276/0x6d0 [ 167.003805][T11571] ? __pfx_blkdev_ioctl+0x10/0x10 [ 167.005055][T11571] ? selinux_file_ioctl+0x180/0x270 [ 167.006323][T11571] ? selinux_file_ioctl+0xb4/0x270 [ 167.007572][T11571] ? __pfx_blkdev_ioctl+0x10/0x10 [ 167.008883][T11571] __x64_sys_ioctl+0x190/0x200 [ 167.010285][T11571] do_syscall_64+0xcd/0x250 [ 167.011740][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.013754][T11571] RIP: 0033:0x7f2d3cb85d29 [ 167.015250][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.021370][T11571] RSP: 002b:00007f2d3da2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.023795][T11571] RAX: ffffffffffffffda RBX: 00007f2d3cd75fa0 RCX: 00007f2d3cb85d29 [ 167.026185][T11571] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 167.028709][T11571] RBP: 00007f2d3cc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 167.031005][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.033214][T11571] R13: 0000000000000000 R14: 00007f2d3cd75fa0 R15: 00007ffc7e257c88 [ 167.035694][T11571] [ 167.118041][T11571] block nbd5: shutting down sockets [ 167.456210][ T104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.459272][ T104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.533140][ T104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.536135][ T104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.636604][ T104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.640044][ T104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.703189][ T104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.706501][ T104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.787848][ T104] bridge_slave_1: left allmulticast mode [ 167.789164][ T104] bridge_slave_1: left promiscuous mode [ 167.790470][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.792596][ T104] bridge_slave_0: left allmulticast mode [ 167.793838][ T104] bridge_slave_0: left promiscuous mode [ 167.795126][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.048078][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.052293][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.056460][ T104] bond0 (unregistering): Released all slaves [ 168.154413][ T104] bond1 (unregistering): Released all slaves [ 168.237969][ T104] bond2 (unregistering): Released all slaves [ 168.358314][ T104] IPVS: stopping master sync thread 11253 ... [ 168.559842][ T104] hsr_slave_0: left promiscuous mode [ 168.562146][ T104] hsr_slave_1: left promiscuous mode [ 168.566504][ T104] veth1_macvtap: left promiscuous mode [ 168.568588][ T104] veth0_macvtap: left promiscuous mode [ 168.570063][ T104] veth1_vlan: left promiscuous mode [ 168.571818][ T104] veth0_vlan: left promiscuous mode [ 168.831344][ T104] team0 (unregistering): Port device team_slave_1 removed [ 168.874920][ T104] team0 (unregistering): Port device team_slave_0 removed [ 169.776751][ T104] bridge_slave_1: left allmulticast mode [ 169.778624][ T104] bridge_slave_1: left promiscuous mode [ 169.780321][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.783164][ T104] bridge_slave_0: left allmulticast mode [ 169.784732][ T104] bridge_slave_0: left promiscuous mode [ 169.786428][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.886321][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.889406][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.893940][ T104] bond0 (unregistering): Released all slaves [ 169.999576][ T104] hsr_slave_0: left promiscuous mode [ 170.001778][ T104] hsr_slave_1: left promiscuous mode [ 170.003856][ T104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.006735][ T104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.178775][ T104] team0 (unregistering): Port device team_slave_1 removed [ 170.222553][ T104] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:55:21 Registers: info registers vcpu 0 CPU#0 RAX=000000000001d7a1 RBX=0000000000000037 RCX=ffffc90024d89000 RDX=0000000000080000 RSI=ffffffff8179c2f6 RDI=0000000000000001 RBP=1ffff92000747e64 RSP=ffffc90003a3f310 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a474e494e524157 R12=0000000000000001 R13=0000000000000000 R14=ffff888023802440 R15=ffffc90003a3f3f8 RIP=ffffffff8179c2f8 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2d3da2a6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b8508 CR3=00000000228dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68cb3c54bbf59e31 3687a3bc3476d288 de38afbd08c7c261 33deef88de5e3eaa ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3d8ad100 00007f2d3cd4b440 00007f2d3cd40004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cd4b498 00007f2d3cd4b490 00007f2d3cd4b488 00007f2d3cd4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005004400000000 0000000000000000 0000000000000000 0000000000100000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000e9cac RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=ffffed100d4e6fee RSI=ffffffff8bd1ec20 RDI=ffffffff817094b9 RBP=ffffed1003ad1910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff905f3690 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d3da08f98 CR3=00000000228dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d3cc02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000035 64626e2f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000016 47414d0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005004400000000 0000000000000000 0000000000000000 0000000000100000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffed10052af374 RBX=ffff888029579ba0 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888029579ba0 RDI=0000000000000000 RBP=ffff888100088f00 RSP=ffffc90000658d90 R8 =0000000000000004 R9 =0000000000000004 R10=ffffed10052af374 R11=ffffc900006589c0 R12=ffff888100088f00 R13=0000000000000000 R14=ffffea0000a55e40 R15=0000000000000000 RIP=ffffffff81fcbfcb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556e6b4500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=00000000662ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020810 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000003100000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a0f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a07 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11dc02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63616d0030696669 775f747269760069 6669775f74726976 5f31687465760069 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6669775f74726976 5f30687465760030 6d72667800306e61 6378760030727368 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea00018b4940 RCX=ffffffff81ea7c94 RDX=fffff9400031692f RSI=0000000000000004 RDI=ffffea00018b4970 RBP=0000000000000001 RSP=ffffc90003ed7850 R8 =0000000000000001 R9 =fffff9400031692e R10=ffffea00018b4973 R11=0000000000000000 R12=0000000000000000 R13=ffffea00018b4940 R14=ffff888022f20d90 R15=ffffc90003ed7cc8 RIP=ffffffff81ea7c9a RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08e70a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08e654b6a3 00007f08e654b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffbc70d40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e26df6c 000055556e26d340 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e26b199 000055556e2683d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 686361632c796e61 3d73738163636178 656f6e22783c0821 800300703901ffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c801000010800 0100000008060601 02f60004000190f0 860800000401c708 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080133a6003065 6c69662f2e01ffff ffffffffffffef08 00030a8004020102 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c00030656c69662f 2e01ffffffffffff ffffef080a800321 8004108080801000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1380041280040780 040a01328c656863 616373663d656863 61632c796e613d73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000