last executing test programs: 11.122275694s ago: executing program 0 (id=3049): socket(0x15, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 10.941534448s ago: executing program 0 (id=3052): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xe9) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0xeb43b000) recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000440)=""/81, 0x51}], 0x3, &(0x7f0000000180)=""/1, 0x1}, 0x17f4d550c3794180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040)) r9 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x4], 0x2, &(0x7f0000000180), 0x0, [{}, {}]}, 0x98) 8.770158512s ago: executing program 0 (id=3054): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f00000002c0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) acct(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000000)={0x8f0f05a, 0x0, @name="ef174b6e73cae6fdb6cc0d453e7b30cde30308de76d43f763702ee9a221827b6"}) 7.709770135s ago: executing program 0 (id=3057): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180)={0x29}) sched_setaffinity(0x0, 0xfffffffffffffdae, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000480)={0x9, 0x8001, [{0x8, 0x0, 0x4}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x7}, {0xd, 0x0, 0xe9e}, {0xef6d, 0x0, 0x2}, {0x9, 0x0, 0x5}, {0x1, 0x0, 0x5}, {0xfffffffe, 0x0, 0x80000000}]}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 7.498219912s ago: executing program 2 (id=3059): r0 = socket$inet6(0xa, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="3d4c3a93864f52c49fe402b3f23d5e82334ba88133f41f659bc3120980cf51e8d2e418dc2a2aff9bc38fc17dea1c53b5717d266c3f05792dce2e8d747875d0732b6074b9d21a3609efa55cf0c145e9e098e34b56ff25b6d0e1426fd785c4f33595fd6027217b39f019e861b302d37f94f3e6ce51d366a95b33638c182ca22ba0ef3d2d820eeb2e549964e88c2a47c4d828e761e077a3348d78a79a9872fa14c985ab93b67ddc53d5b9b01a82f28ef55aaf20139f67ba9cb2cb778d4d92571474a49c97e3d9892192a231b4b84c9753886f2bd71bff279546816fecb9689a59c84701833181c45019e9c1baf10294cef092d00b5884e381fac7a8c3bd9b825ce7304c5fe6d0920258e404757c71cd8cdcf68b8bd5294d6631e58ba416ec0f3fe1c58fcdc9da095c56303abb139596f2cd4e8bdb0949a2295bff563deae509c8e74b380786e858771833e53bd2db879c00e3bd6987fd71c91a", 0x158, 0x6, 0x0, 0x3}, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="880000000000000029"], 0xa0}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 7.092340811s ago: executing program 2 (id=3061): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x2, 0x0) 6.894529192s ago: executing program 2 (id=3065): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_io_uring_setup(0x5a8, &(0x7f0000000380)={0x0, 0x4, 0x10100}, &(0x7f0000000340), &(0x7f00000002c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 6.266400972s ago: executing program 0 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) fallocate(r2, 0x0, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900fc2fd9f205904135a2fb0a006bbd49cd79f3c7d84c10db9fbfc4e28be7aafea67490c879a33033ee463e8eccd7d2f11470013c0519677bbc"], 0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3], 0x0, 0x42}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x1000) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="19", 0x1}], 0x1}, 0x0) 5.177694324s ago: executing program 1 (id=3071): syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_reply\x00', r2}, 0xfffffffffffffc92) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c18afd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], 0x1, 0x400}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="0324"], 0x28}}, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033006c6f0000000000000000000000bf098c7b82b77243d350d467b5fb69000000"], 0x38}}, 0x0) 5.108415249s ago: executing program 2 (id=3072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) close_range(r3, 0xffffffffffffffff, 0x0) 5.107871145s ago: executing program 0 (id=3073): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x8, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 4.00416007s ago: executing program 1 (id=3075): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x2, 0x0) 3.977382071s ago: executing program 4 (id=3077): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x964}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 3.83829376s ago: executing program 1 (id=3078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000018"], 0xc0}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000240)={0x1, 0x5}) 3.831074542s ago: executing program 4 (id=3079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000380)={0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000073c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r2, r3, 0x2f, 0x4, 0x4, @prog_fd}, 0x20) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000019840)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800020000000000080009000000000008000a000000000008000a00000000000000090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b800800090000000000080009000000000032000900000000000800"], 0x184}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r5 = syz_clone3(0x0, 0x0) tgkill(0x0, r5, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x1a6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) read(r6, &(0x7f0000000140)=""/237, 0xed) 3.451090839s ago: executing program 1 (id=3081): statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000009c0)=@abs={0x1}, 0x6e, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRESDEC, @ANYRESHEX=r5, @ANYRES32=r3], 0x30, 0x4000000}}], 0x1, 0x804) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000050000000900010073797a300000000050000006090a01040000000000000000010000090c00104000000000000000050900020073797a310000000008000540000000381c0011800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000000000ac20d3f010dc4e734bb0fb43ad345232c158043e75527cc8df27583ff55e5b5b54b0e66dfede491f83b535be07653c25723b1111902367d2339a0cadad591c3228cd1470a6c6eae0b794ec47e66b1177ad0a1cb20105065ffba852388fe9b35a90040ea8b1169aca4ae51bab2be5e9cf82aeb26f396cae1f33837d918511cf367c08a4cbef5efe05b257cdb73e36aba568344c1cdf1c1b72118820d12f42218f3a9fe5531906eac7ea27f9699e77aa2422d6a067a391d9d17642a91883d15dec554867eedff00dff8f260d2ab4af6d2d17892ef2eb5a5ab386589c055891fc8e9303198c9d014a5dcc0fcd995d05880794c9b4f452703a03ab7f4c589d6c2b63448f1771868fc73de1351dd65958359011bd7d8d5d96d9d74486686ade19c5da50ad2b7b2621b312056bd00c1d9da34130cf66b3062a780a0af03c4e1c396a77d7588e3eea37b9ed2b7d5b36f6ffc2efeed6baf1a573ed4ab283e7c85999586aa82e778a59dc2e2b71b1eee141dc1b0aaae3fd370910ba439c1b152e186ce4674c92c67b678645963b83be79845b73e45c01b012f4836446a22ce8b640c975bfb197afe74e31b48dd4346da0605644422d6f9eeef33eae892"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{0x2d}, {0x16}]}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 3.353972238s ago: executing program 3 (id=3082): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) 2.891621395s ago: executing program 3 (id=3083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) fallocate(r2, 0x0, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900fc2fd9f205904135a2fb0a006bbd49cd79f3c7d84c10db9fbfc4e28be7aafea67490c879a33033ee463e8eccd7d2f11470013c0519677bbc"], 0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3], 0x0, 0x42}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x1000) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="19", 0x1}], 0x1}, 0x0) 2.809783802s ago: executing program 4 (id=3084): syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_reply\x00', r2}, 0xfffffffffffffc92) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c18afd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], 0x1, 0x400}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="0324"], 0x28}}, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x0) 1.888212307s ago: executing program 2 (id=3085): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x8, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 1.69892394s ago: executing program 4 (id=3086): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbbd2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000240)=0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000100)='/dev/iommu\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000018"], 0xc0}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000240)={0x1, 0x5}) 1.575528609s ago: executing program 3 (id=3087): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x2, 0x0) 1.398314115s ago: executing program 3 (id=3088): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="64090000000500000000000000000000000000005402010002000000fcffffff0509010408000b0073797a3100000000000000000000000000000000000000000000000000000000b6dd87000000000000000994d0d3c27f1243d7c4ca3356f6d2b6a1d59ddf1afa010d815fd81fd96450ec3a99dd924a6c997602e1d519e46c2bfd637f49b34455a15a000801000000000000000200030000000000429a00000000ff0301000000060000000101070000000000060000000700060002000000eb000000ff0f1f0002000000000400000080020003000000c20000000700070002000000040000000400001000000000ab2a0000010007000200000000000000fbff1f00af2b6c1400000100ff0f000100000000035700000100010002000000ffff0000d20e000403000000ff07"], 0x964}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 1.263394436s ago: executing program 3 (id=3089): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) r4 = open(0x0, 0x1d547e, 0x11a) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x2, 0x0, &(0x7f0000000340)=""/73, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550c, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)) mkdir(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 1.162855288s ago: executing program 4 (id=3090): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) r4 = open(0x0, 0x1d547e, 0x11a) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x2, 0x0, &(0x7f0000000340)=""/73, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550c, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)) mkdir(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000217100000001010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000016d8ce4db711d5e46c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e30000000000000000000000014000100677265e52ea619052f9c08000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 675.648776ms ago: executing program 1 (id=3091): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 522.410791ms ago: executing program 1 (id=3092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x1}, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=@delqdisc={0xd8, 0x25, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}}, 0x20048015) 51.5248ms ago: executing program 3 (id=3093): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000073c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r2, r3, 0x2f, 0x4, 0x4, @prog_fd}, 0x20) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000019840)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800020000000000080009000000000008000a000000000008000a00000000000000090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b800800090000000000080009000000000032000900000000000800"], 0x184}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r5 = syz_clone3(0x0, 0x0) tgkill(0x0, r5, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x1a6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) read(r6, &(0x7f0000000140)=""/237, 0xed) 19.069918ms ago: executing program 4 (id=3094): dup(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) getpid() sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000005) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 0s ago: executing program 2 (id=3095): syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_reply\x00', r2}, 0xfffffffffffffc92) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c18afd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], 0x1, 0x400}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="0324"], 0x28}}, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x0) kernel console output (not intermixed with test programs): : Couldn't create ib_mad CQ [ 1013.416234][ T29] audit: type=1326 audit(1720792432.656:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17237 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618d975bd9 code=0x7ffc0000 [ 1013.416295][ T29] audit: type=1326 audit(1720792432.656:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17237 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618d975bd9 code=0x7ffc0000 [ 1013.490563][T17205] infiniband syz1: Couldn't open port 1 [ 1014.694426][ T29] audit: type=1326 audit(1720792432.656:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17237 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f618d975bd9 code=0x7ffc0000 [ 1014.723888][ T29] audit: type=1326 audit(1720792432.656:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17237 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618d975bd9 code=0x7ffc0000 [ 1015.398242][T17205] RDS/IB: syz1: added [ 1015.402290][T17205] smc: adding ib device syz1 with port count 1 [ 1015.478605][T17205] smc: ib device syz1 port 1 has pnetid [ 1015.544761][T17205] lo speed is unknown, defaulting to 1000 [ 1015.726682][ T5137] lo speed is unknown, defaulting to 1000 [ 1016.533002][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 1016.548475][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 1016.557395][T17271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2131'. [ 1017.328991][T17205] lo speed is unknown, defaulting to 1000 [ 1017.944492][T17205] lo speed is unknown, defaulting to 1000 [ 1019.362565][T17205] lo speed is unknown, defaulting to 1000 [ 1020.398783][T17306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2140'. [ 1020.730737][T17205] lo speed is unknown, defaulting to 1000 [ 1021.725914][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1021.735625][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1022.334526][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1022.344745][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1022.352394][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1022.366972][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1022.723772][T17319] lo speed is unknown, defaulting to 1000 [ 1023.540586][ T5558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.496497][ T4478] Bluetooth: hci0: command tx timeout [ 1024.936445][ T5558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.000268][ T5558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.443577][T17379] FAULT_INJECTION: forcing a failure. [ 1026.443577][T17379] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.465176][ T5558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.504248][T17379] CPU: 1 PID: 17379 Comm: syz.2.2157 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1026.514455][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1026.524541][T17379] Call Trace: [ 1026.527831][T17379] [ 1026.530786][T17379] dump_stack_lvl+0x16c/0x1f0 [ 1026.535485][T17379] should_fail_ex+0x497/0x5b0 [ 1026.540183][T17379] should_failslab+0x9/0x20 [ 1026.544720][T17379] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1026.550122][T17379] ? __build_skb+0x3f/0x90 [ 1026.554565][T17379] __build_skb+0x3f/0x90 [ 1026.558832][T17379] build_skb+0x22/0x280 [ 1026.563038][T17379] __tun_build_skb+0x2c/0x340 [ 1026.567745][T17379] tun_build_skb.constprop.0+0x7df/0x1250 [ 1026.573503][T17379] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1026.579687][T17379] ? hlock_class+0x4e/0x130 [ 1026.584221][T17379] ? __lock_acquire+0xc5d/0x3b30 [ 1026.589194][T17379] tun_get_user+0x888/0x3c30 [ 1026.593823][T17379] ? __pfx_tun_get_user+0x10/0x10 [ 1026.596530][ T4478] Bluetooth: hci0: command tx timeout [ 1026.598857][T17379] ? find_held_lock+0x2d/0x110 [ 1026.609014][T17379] ? __pfx_lock_release+0x10/0x10 [ 1026.614083][T17379] tun_chr_write_iter+0xe8/0x210 [ 1026.619069][T17379] vfs_write+0x6b6/0x1140 [ 1026.623479][T17379] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1026.629053][T17379] ? __pfx_vfs_write+0x10/0x10 [ 1026.633839][T17379] ? __fget_files+0x256/0x400 [ 1026.638539][T17379] ? __fget_light+0x173/0x210 [ 1026.643235][T17379] ksys_write+0x12f/0x260 [ 1026.647588][T17379] ? __pfx_ksys_write+0x10/0x10 [ 1026.652456][T17379] do_syscall_64+0xcd/0x250 [ 1026.656973][T17379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.662875][T17379] RIP: 0033:0x7f92a377475f [ 1026.667289][T17379] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1026.686897][T17379] RSP: 002b:00007f92a45c7010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1026.695315][T17379] RAX: ffffffffffffffda RBX: 00007f92a3903f60 RCX: 00007f92a377475f [ 1026.703315][T17379] RDX: 00000000000000be RSI: 0000000020001600 RDI: 00000000000000c8 [ 1026.711287][T17379] RBP: 00007f92a45c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.719254][T17379] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 1026.727224][T17379] R13: 000000000000000b R14: 00007f92a3903f60 R15: 00007ffef4d104c8 [ 1026.735200][T17379] [ 1026.738369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.082699][T17319] chnl_net:caif_netlink_parms(): no params data found [ 1027.550139][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1027.550157][ T29] audit: type=1400 audit(1720792448.136:634): avc: denied { write } for pid=17395 comm="syz.1.2159" name="file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1027.602942][ T5558] bridge_slave_1: left allmulticast mode [ 1027.624461][ T5558] bridge_slave_1: left promiscuous mode [ 1028.456545][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.474853][ T29] audit: type=1400 audit(1720792448.136:635): avc: denied { open } for pid=17395 comm="syz.1.2159" path="/43/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1028.537483][ T5558] bridge_slave_0: left allmulticast mode [ 1028.543140][ T5558] bridge_slave_0: left promiscuous mode [ 1028.561050][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.656418][ T4478] Bluetooth: hci0: command tx timeout [ 1029.291297][T17418] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2163'. [ 1029.325486][T17418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2163'. [ 1029.377624][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2163'. [ 1031.919086][ T4478] Bluetooth: hci0: command tx timeout [ 1032.263541][ T5558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.287117][ T5558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.301701][ T5558] bond0 (unregistering): Released all slaves [ 1032.573660][ T5558] tipc: Disabling bearer [ 1032.586387][ T5558] tipc: Left network mode [ 1038.861641][T17319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.892754][T17319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.935198][T17319] bridge_slave_0: entered allmulticast mode [ 1038.952461][T17319] bridge_slave_0: entered promiscuous mode [ 1039.850430][T17319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.894182][T17319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.929672][T17319] bridge_slave_1: entered allmulticast mode [ 1039.940176][T17319] bridge_slave_1: entered promiscuous mode [ 1040.375736][T17319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.397191][T17502] FAULT_INJECTION: forcing a failure. [ 1040.397191][T17502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.493932][T17502] CPU: 1 PID: 17502 Comm: syz.4.2180 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1040.504320][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1040.514378][T17502] Call Trace: [ 1040.517654][T17502] [ 1040.520583][T17502] dump_stack_lvl+0x16c/0x1f0 [ 1040.525268][T17502] should_fail_ex+0x497/0x5b0 [ 1040.529953][T17502] _copy_from_user+0x30/0xf0 [ 1040.534547][T17502] futex_parse_waitv+0xff/0x600 [ 1040.539429][T17502] ? __pfx_futex_wake_mark+0x10/0x10 [ 1040.544726][T17502] ? __pfx_futex_parse_waitv+0x10/0x10 [ 1040.550197][T17502] ? trace_kmalloc+0x2d/0xe0 [ 1040.554793][T17502] ? __kmalloc_noprof+0x20b/0x410 [ 1040.559818][T17502] __do_sys_futex_waitv+0x14f/0x2c0 [ 1040.565021][T17502] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 1040.570749][T17502] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1040.575987][T17502] do_syscall_64+0xcd/0x250 [ 1040.580523][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.586437][T17502] RIP: 0033:0x7efc8b375bd9 [ 1040.590854][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.610469][T17502] RSP: 002b:00007efc8c1c9048 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1040.618902][T17502] RAX: ffffffffffffffda RBX: 00007efc8b503f60 RCX: 00007efc8b375bd9 [ 1040.626888][T17502] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001080 [ 1040.634862][T17502] RBP: 00007efc8c1c90a0 R08: 0000000000000001 R09: 0000000000000000 [ 1040.642849][T17502] R10: 0000000020001100 R11: 0000000000000246 R12: 0000000000000001 [ 1040.650818][T17502] R13: 000000000000000b R14: 00007efc8b503f60 R15: 00007ffe8830c6c8 [ 1040.658792][T17502] [ 1040.661922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.722929][T17319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.232423][T17510] bond0: entered promiscuous mode [ 1041.266760][T17510] bond_slave_0: entered promiscuous mode [ 1041.272715][T17510] bond_slave_1: entered promiscuous mode [ 1041.389253][T17319] team0: Port device team_slave_0 added [ 1041.414416][T17516] fuse: Bad value for 'group_id' [ 1041.446959][T17319] team0: Port device team_slave_1 added [ 1041.494695][T17516] UBIFS error (pid: 17516): cannot open "/dev/sr0", error -22 [ 1041.522883][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.562247][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.603228][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.629792][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.916086][ T29] audit: type=1400 audit(1720792462.496:636): avc: denied { map } for pid=17520 comm="syz.4.2186" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1042.111014][ T5558] veth1_macvtap: left promiscuous mode [ 1042.117951][ T5558] veth0_macvtap: left promiscuous mode [ 1042.125999][ T5558] veth1_vlan: left promiscuous mode [ 1042.132650][ T5558] veth0_vlan: left promiscuous mode [ 1043.961310][ T5558] infiniband syz1: set down [ 1044.624654][ T5558] team0 (unregistering): Port device team_slave_1 removed [ 1044.685724][ T5558] team0 (unregistering): Port device team_slave_0 removed [ 1045.293628][ T5332] smc: removing ib device syz1 [ 1045.494633][T13855] lo speed is unknown, defaulting to 1000 [ 1045.542696][T17319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.573794][T17319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.704492][T17319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.800592][T17553] bond0: entered promiscuous mode [ 1045.856337][T17553] bond_slave_0: entered promiscuous mode [ 1045.878592][T17553] bond_slave_1: entered promiscuous mode [ 1045.935519][T17319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.999556][T17319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.125912][T17319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.245226][ T29] audit: type=1400 audit(1720792466.826:637): avc: denied { getopt } for pid=17557 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1046.264892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.914990][T17319] hsr_slave_0: entered promiscuous mode [ 1047.290147][T17319] hsr_slave_1: entered promiscuous mode [ 1047.813067][T17319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1047.841522][T17319] Cannot create hsr debugfs directory [ 1051.989465][T17319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1052.029889][T17319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1052.064066][T17319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1052.115877][T17319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.340593][T17319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.421690][T17319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.543115][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.550437][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.675175][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.682758][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.025340][T17319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.039272][T17319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1055.062923][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.070218][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.510293][T17319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.749214][T17319] veth0_vlan: entered promiscuous mode [ 1055.818929][T17319] veth1_vlan: entered promiscuous mode [ 1055.877962][T17681] FAULT_INJECTION: forcing a failure. [ 1055.877962][T17681] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.955640][T17319] veth0_macvtap: entered promiscuous mode [ 1055.974446][T17681] CPU: 0 PID: 17681 Comm: syz.1.2219 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1055.984827][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1055.994896][T17681] Call Trace: [ 1055.998183][T17681] [ 1056.001112][T17681] dump_stack_lvl+0x16c/0x1f0 [ 1056.005802][T17681] should_fail_ex+0x497/0x5b0 [ 1056.010488][T17681] should_failslab+0x9/0x20 [ 1056.015436][T17681] __kmalloc_noprof+0xcf/0x410 [ 1056.020202][T17681] ? __pfx_lock_acquire+0x10/0x10 [ 1056.025238][T17681] tomoyo_realpath_from_path+0xb9/0x720 [ 1056.030789][T17681] ? tomoyo_profile+0x47/0x60 [ 1056.035468][T17681] tomoyo_path_number_perm+0x245/0x590 [ 1056.040939][T17681] ? tomoyo_path_number_perm+0x232/0x590 [ 1056.046582][T17681] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1056.053017][T17681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1056.059009][T17681] ? __fget_files+0x256/0x400 [ 1056.063711][T17681] security_file_ioctl+0x75/0xc0 [ 1056.068685][T17681] __x64_sys_ioctl+0xbb/0x220 [ 1056.073381][T17681] do_syscall_64+0xcd/0x250 [ 1056.077900][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.083808][T17681] RIP: 0033:0x7f5ca2775bd9 [ 1056.088225][T17681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.107855][T17681] RSP: 002b:00007f5ca349b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1056.116292][T17681] RAX: ffffffffffffffda RBX: 00007f5ca2904038 RCX: 00007f5ca2775bd9 [ 1056.124270][T17681] RDX: 0000000000000000 RSI: 0000000000007c80 RDI: 0000000000000007 [ 1056.132244][T17681] RBP: 00007f5ca349b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.140215][T17681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.148187][T17681] R13: 000000000000006e R14: 00007f5ca2904038 R15: 00007ffc6c5c7768 [ 1056.156163][T17681] [ 1056.195956][T17319] veth1_macvtap: entered promiscuous mode [ 1056.252784][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.274176][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.295676][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.312687][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.339589][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.356661][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.372247][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.391597][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.414009][T17319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.104137][T17681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1057.140503][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.200349][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.243009][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.286189][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.317998][T17696] No memory to map [ 1057.344533][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.386214][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.396072][T17319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.853440][T17319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.010695][T17319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.090634][T17319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.121004][T17319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.149871][T17319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.175312][T17319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.906967][ T5332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.914821][ T5332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.055849][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.092928][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.924575][T17739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2139'. [ 1061.031915][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2233'. [ 1061.193115][T17760] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2231'. [ 1061.230942][T17760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2231'. [ 1061.240353][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2231'. [ 1061.287579][T17754] lo speed is unknown, defaulting to 1000 [ 1061.327950][T17754] lo speed is unknown, defaulting to 1000 [ 1061.349608][T17754] lo speed is unknown, defaulting to 1000 [ 1062.444163][T17754] infiniband syz1: set active [ 1062.449389][ T5197] lo speed is unknown, defaulting to 1000 [ 1062.455261][T17754] infiniband syz1: added lo [ 1062.468280][T17754] syz1: rxe_create_cq: returned err = -12 [ 1062.474165][T17754] infiniband syz1: Couldn't create ib_mad CQ [ 1062.480920][T17754] infiniband syz1: Couldn't open port 1 [ 1062.551639][T17754] RDS/IB: syz1: added [ 1062.587914][ T5134] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1062.617398][T17754] smc: adding ib device syz1 with port count 1 [ 1062.738298][T17754] smc: ib device syz1 port 1 has pnetid [ 1062.744973][T17754] lo speed is unknown, defaulting to 1000 [ 1062.796221][ T5197] lo speed is unknown, defaulting to 1000 [ 1063.651215][T17754] lo speed is unknown, defaulting to 1000 [ 1065.042720][T17754] lo speed is unknown, defaulting to 1000 [ 1066.208346][T17754] lo speed is unknown, defaulting to 1000 [ 1066.985106][T17754] lo speed is unknown, defaulting to 1000 [ 1067.081945][T17860] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1067.091272][T17860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1067.100431][T17860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1068.793279][T17887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2255'. [ 1069.947870][T17922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1070.121103][ T29] audit: type=1326 audit(1720792490.676:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.3.2260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f618d975bd9 code=0x0 [ 1071.141978][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1073.220145][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2270'. [ 1073.247115][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2270'. [ 1073.256211][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 1073.395555][T17957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1073.402054][T17957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1073.483080][T17957] hsr_slave_0: left promiscuous mode [ 1073.505397][T17957] hsr_slave_1: left promiscuous mode [ 1074.251235][T17968] Bluetooth: MGMT ver 1.22 [ 1075.459473][ T29] audit: type=1400 audit(1720792496.036:639): avc: denied { map } for pid=17972 comm="syz.0.2274" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1078.242005][T18013] FAULT_INJECTION: forcing a failure. [ 1078.242005][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.255413][T18013] CPU: 1 PID: 18013 Comm: syz.2.2284 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1078.265596][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1078.275642][T18013] Call Trace: [ 1078.278913][T18013] [ 1078.281826][T18013] dump_stack_lvl+0x16c/0x1f0 [ 1078.286496][T18013] should_fail_ex+0x497/0x5b0 [ 1078.291161][T18013] _copy_to_user+0x30/0xc0 [ 1078.295564][T18013] simple_read_from_buffer+0xd0/0x160 [ 1078.300941][T18013] proc_fail_nth_read+0x1b0/0x290 [ 1078.305981][T18013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1078.311533][T18013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1078.317107][T18013] vfs_read+0x1d4/0xbd0 [ 1078.321293][T18013] ? __fdget_pos+0xeb/0x180 [ 1078.325818][T18013] ? __pfx_vfs_read+0x10/0x10 [ 1078.330523][T18013] ? __pfx___mutex_lock+0x10/0x10 [ 1078.335578][T18013] ? __fget_files+0x256/0x400 [ 1078.340284][T18013] ksys_read+0x12f/0x260 [ 1078.344554][T18013] ? __pfx_ksys_read+0x10/0x10 [ 1078.349345][T18013] do_syscall_64+0xcd/0x250 [ 1078.353880][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.359830][T18013] RIP: 0033:0x7f92a37746bc [ 1078.364257][T18013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1078.383867][T18013] RSP: 002b:00007f92a45a6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1078.392274][T18013] RAX: ffffffffffffffda RBX: 00007f92a3904038 RCX: 00007f92a37746bc [ 1078.400245][T18013] RDX: 000000000000000f RSI: 00007f92a45a60b0 RDI: 0000000000000007 [ 1078.408222][T18013] RBP: 00007f92a45a60a0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.416240][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.424225][T18013] R13: 000000000000006e R14: 00007f92a3904038 R15: 00007ffef4d104c8 [ 1078.432215][T18013] [ 1078.435346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.552623][ T29] audit: type=1400 audit(1720792499.136:640): avc: denied { setattr } for pid=18015 comm="syz.0.2285" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1078.574248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.697573][T18066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1082.897419][ T29] audit: type=1326 audit(1720792503.486:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18055 comm="syz.2.2296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a3775bd9 code=0x0 [ 1084.754307][T18092] Process accounting resumed [ 1087.238983][T18130] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 1087.248130][T18130] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1087.257540][T18130] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 1087.647583][T18130] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1090.135301][T18128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2314'. [ 1091.053473][T18128] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1092.774730][ T29] audit: type=1326 audit(1720792513.316:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1093.527675][ T29] audit: type=1326 audit(1720792513.316:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1093.571560][ T29] audit: type=1326 audit(1720792513.316:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1093.833951][ T29] audit: type=1326 audit(1720792513.326:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1094.829842][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'. [ 1094.848893][ T29] audit: type=1326 audit(1720792513.326:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1094.906673][ T29] audit: type=1326 audit(1720792513.326:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1094.963858][ T29] audit: type=1326 audit(1720792513.326:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1095.080634][T18173] rdma_rxe: rxe_newlink: failed to add lo [ 1095.095049][ T29] audit: type=1326 audit(1720792513.326:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc8b36cc27 code=0x7ffc0000 [ 1095.119044][ T29] audit: type=1326 audit(1720792513.326:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc8b3115d9 code=0x7ffc0000 [ 1095.142565][ T29] audit: type=1326 audit(1720792513.326:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18152 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b375bd9 code=0x7ffc0000 [ 1095.733443][T18188] No such timeout policy "syz0" [ 1096.297144][T18202] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1096.496285][T18202] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1097.549606][T18202] wg2: entered promiscuous mode [ 1097.576323][T18202] wg2: entered allmulticast mode [ 1097.896270][ T5134] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1098.087959][ T5134] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1098.110383][ T5134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.138961][ T5134] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1098.154290][ T5134] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1098.184223][ T5134] usb 3-1: Manufacturer: syz [ 1098.211216][ T5134] usb 3-1: config 0 descriptor?? [ 1098.366212][ T5134] rc_core: IR keymap rc-hauppauge not found [ 1098.376451][ T5134] Registered IR keymap rc-empty [ 1098.385782][ T5134] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1098.398873][ T5134] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 1098.485731][T18231] fuse: Unknown parameter 'fuse' [ 1099.036833][T13853] usb 3-1: USB disconnect, device number 15 [ 1102.406301][ T4478] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1102.416485][ T4478] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1106.596882][T17275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1106.610904][T17275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1106.707774][T17275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1106.721599][T17275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1106.745987][T17275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1106.753855][T17275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.054958][ T5332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.293552][ T5332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.511851][ T5332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.569217][T18338] lo speed is unknown, defaulting to 1000 [ 1107.829359][ T5332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.339858][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 1108.377973][ T5332] bridge_slave_1: left allmulticast mode [ 1108.476411][ T5332] bridge_slave_1: left promiscuous mode [ 1108.482274][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.552130][ T5332] bridge_slave_0: left allmulticast mode [ 1108.733105][ T5332] bridge_slave_0: left promiscuous mode [ 1108.740602][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.877880][T13536] Bluetooth: hci1: command tx timeout [ 1110.757859][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.772055][ T5332] bond_slave_0: left promiscuous mode [ 1110.786972][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.827233][ T5332] bond_slave_1: left promiscuous mode [ 1110.853765][ T5332] bond0 (unregistering): Released all slaves [ 1110.900906][T13536] Bluetooth: hci1: command tx timeout [ 1111.201752][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1111.201773][ T29] audit: type=1400 audit(1720792531.786:710): avc: denied { audit_write } for pid=18398 comm="syz.1.2373" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1111.326921][T18400] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2373'. [ 1111.872114][T18406] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1114.116774][T18400] openvswitch: netlink: Multiple metadata blocks provided [ 1114.143127][T13536] Bluetooth: hci1: command tx timeout [ 1114.162023][ T29] audit: type=1400 audit(1720792532.436:711): avc: denied { create } for pid=18403 comm="syz.3.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1114.331951][ T29] audit: type=1400 audit(1720792532.446:712): avc: denied { ioctl } for pid=18403 comm="syz.3.2374" path="socket:[62900]" dev="sockfs" ino=62900 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1115.150785][T18416] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1115.586188][ T5332] hsr_slave_0: left promiscuous mode [ 1115.617818][ T5332] hsr_slave_1: left promiscuous mode [ 1115.635386][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.666279][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.738141][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.799331][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.945021][ T5332] veth1_macvtap: left promiscuous mode [ 1115.977149][ T5332] veth0_macvtap: left promiscuous mode [ 1115.996657][ T5332] veth1_vlan: left promiscuous mode [ 1116.002073][ T5332] veth0_vlan: left promiscuous mode [ 1116.181678][T13536] Bluetooth: hci1: command tx timeout [ 1116.514176][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.522771][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.929572][T18445] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1118.724548][ T29] audit: type=1400 audit(1720792539.306:713): avc: denied { accept } for pid=18460 comm="syz.1.2385" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1119.754156][ T29] audit: type=1400 audit(1720792539.526:714): avc: denied { bind } for pid=18463 comm="syz.0.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1119.839266][ T29] audit: type=1400 audit(1720792539.536:715): avc: denied { ioctl } for pid=18463 comm="syz.0.2384" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1119.863834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.024994][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 1120.201486][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 1120.671603][T18480] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2388'. [ 1120.684604][T18480] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2388'. [ 1120.700794][T18480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2388'. [ 1121.495160][T18445] wg2: entered promiscuous mode [ 1121.500278][T18445] wg2: entered allmulticast mode [ 1121.519558][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1121.542406][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1121.596296][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1121.790264][T18338] chnl_net:caif_netlink_parms(): no params data found [ 1123.843221][T18338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.851123][T18525] FAULT_INJECTION: forcing a failure. [ 1123.851123][T18525] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.874838][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.886546][T18338] bridge_slave_0: entered allmulticast mode [ 1123.901004][T18338] bridge_slave_0: entered promiscuous mode [ 1123.909844][T18525] CPU: 1 PID: 18525 Comm: syz.1.2397 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1123.920006][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1123.930092][T18525] Call Trace: [ 1123.933362][T18525] [ 1123.936300][T18525] dump_stack_lvl+0x16c/0x1f0 [ 1123.940968][T18525] should_fail_ex+0x497/0x5b0 [ 1123.945631][T18525] should_failslab+0x9/0x20 [ 1123.950126][T18525] __kmalloc_noprof+0xcf/0x410 [ 1123.954872][T18525] ? __pfx_lock_acquire+0x10/0x10 [ 1123.959887][T18525] tomoyo_realpath_from_path+0xb9/0x720 [ 1123.965421][T18525] ? tomoyo_profile+0x47/0x60 [ 1123.970104][T18525] tomoyo_path_number_perm+0x245/0x590 [ 1123.975585][T18525] ? tomoyo_path_number_perm+0x232/0x590 [ 1123.981216][T18525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1123.987194][T18525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1123.993164][T18525] ? __fget_files+0x256/0x400 [ 1123.997849][T18525] security_file_ioctl+0x75/0xc0 [ 1124.002955][T18525] __x64_sys_ioctl+0xbb/0x220 [ 1124.007641][T18525] do_syscall_64+0xcd/0x250 [ 1124.012137][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.018037][T18525] RIP: 0033:0x7f5ca2775bd9 [ 1124.022469][T18525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.042103][T18525] RSP: 002b:00007f5ca34bc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.050525][T18525] RAX: ffffffffffffffda RBX: 00007f5ca2903f60 RCX: 00007f5ca2775bd9 [ 1124.058497][T18525] RDX: 0000000020000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 1124.066471][T18525] RBP: 00007f5ca34bc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.074445][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.082415][T18525] R13: 000000000000000b R14: 00007f5ca2903f60 R15: 00007ffc6c5c7768 [ 1124.090388][T18525] [ 1124.093468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.153911][T18525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1124.168203][T18338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.195879][ T29] audit: type=1400 audit(1720792544.776:716): avc: denied { ioctl } for pid=18523 comm="syz.1.2397" path="socket:[63086]" dev="sockfs" ino=63086 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1124.233050][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.262649][T18338] bridge_slave_1: entered allmulticast mode [ 1124.290473][T18338] bridge_slave_1: entered promiscuous mode [ 1124.548534][T18338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.619183][T18338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.924806][T18338] team0: Port device team_slave_0 added [ 1124.964607][T18338] team0: Port device team_slave_1 added [ 1125.116017][T18338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.138672][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.164605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.222123][T18338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.265101][T18338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.298696][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.307271][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1125.367046][T18338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.415281][T18555] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1125.852124][T18555] wg2: entered promiscuous mode [ 1125.874178][T18555] wg2: entered allmulticast mode [ 1126.917952][T18557] rdma_rxe: rxe_newlink: failed to add lo [ 1126.920279][T18338] hsr_slave_0: entered promiscuous mode [ 1126.967464][T18338] hsr_slave_1: entered promiscuous mode [ 1126.974638][T18338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1127.001974][T18338] Cannot create hsr debugfs directory [ 1127.179115][T13853] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1127.437011][T13853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.456220][T13853] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1127.496802][T13853] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.505894][T13853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.631429][T13853] usb 2-1: config 0 descriptor?? [ 1130.905963][T13853] usb 2-1: string descriptor 0 read error: -71 [ 1131.076279][T13853] usb 2-1: USB disconnect, device number 11 [ 1132.403853][T18636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1132.629575][T18338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1132.665795][T18338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1132.678783][T18338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1132.689136][T18338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1132.840638][T18640] rdma_rxe: rxe_newlink: failed to add lo [ 1132.955705][T18338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.034125][T18338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.066488][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.073625][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.137453][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.144601][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.221318][T18677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2426'. [ 1135.424097][T18677] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1135.511878][T18338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.370747][T18338] veth0_vlan: entered promiscuous mode [ 1137.433635][T18338] veth1_vlan: entered promiscuous mode [ 1137.585645][T18338] veth0_macvtap: entered promiscuous mode [ 1137.861358][T18338] veth1_macvtap: entered promiscuous mode [ 1138.005427][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.017615][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.676339][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.731883][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.780932][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.126227][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.126247][ T29] audit: type=1400 audit(1720792559.436:717): avc: denied { write } for pid=18739 comm="syz.1.2437" path="socket:[65195]" dev="sockfs" ino=65195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1139.136057][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.136078][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.139251][T18338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.278413][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.314311][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.346196][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.378287][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.517822][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.382984][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.422146][T18338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.453420][T18338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.503824][T18338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.629320][T18338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.642284][T18763] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1140.966545][T18763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1140.986173][ T29] audit: type=1400 audit(1720792561.236:718): avc: denied { execute } for pid=18765 comm="syz.3.2442" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1141.016363][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1141.035899][T18338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.078075][T18338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.103704][T18338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.345389][ T5558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.396455][ T5558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.473093][ T5526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.492950][ T5526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.596816][T18840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2457'. [ 1146.875883][T18846] rdma_rxe: rxe_newlink: failed to add lo [ 1147.712975][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1148.023892][T18876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1148.070844][T18876] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1149.756272][T13536] Bluetooth: hci0: command 0x0406 tx timeout [ 1151.615475][T18926] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1151.656306][T18926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1151.668890][T18926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1152.975215][T18953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2483'. [ 1153.024575][T18953] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1154.744297][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1154.867557][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1155.791005][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1155.829133][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1156.881374][T19005] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2494'. [ 1158.062985][T19005] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2494'. [ 1159.699647][T19006] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1159.724175][T19006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1159.837476][T19006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1161.065338][T19021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1162.097309][T19021] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1163.835918][T19062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2512'. [ 1163.910792][T19062] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1164.286444][T13853] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1164.647511][T13853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.662686][T13853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1165.726335][T13853] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1165.746616][T13853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.787448][T13853] usb 4-1: config 0 descriptor?? [ 1165.824287][T19064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1166.547214][T19089] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1166.585440][ T29] audit: type=1326 audit(1720792587.146:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19077 comm="syz.0.2518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa8975bd9 code=0x0 [ 1166.969907][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2521'. [ 1167.013651][T13853] appletouch 4-1:0.0: Failed to read mode from device. [ 1167.161722][T13853] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1167.288286][T13853] usb 4-1: USB disconnect, device number 12 [ 1169.520449][T19142] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1169.931239][T19142] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1173.719100][ T5172] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1173.775493][T19158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1174.444694][ T29] audit: type=1326 audit(1720792594.376:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.2.2535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a3775bd9 code=0x0 [ 1174.682792][T19164] lo speed is unknown, defaulting to 1000 [ 1174.703644][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.767799][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1174.796988][ T5172] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1174.811046][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.145831][ T5172] usb 2-1: config 0 descriptor?? [ 1175.173011][T19148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1177.546655][ T5172] appletouch 2-1:0.0: Failed to read mode from device. [ 1177.583696][ T5172] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1177.656941][ T5172] usb 2-1: USB disconnect, device number 12 [ 1177.679103][T19152] udevd[19152]: setting mode of /dev/bus/usb/002/012 to 020664 failed: No such file or directory [ 1178.205885][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.248153][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.261985][T19152] udevd[19152]: setting owner of /dev/bus/usb/002/012 to uid=0, gid=0 failed: No such file or directory [ 1180.456325][T19237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1180.554446][ T29] audit: type=1326 audit(1720792601.136:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19232 comm="syz.0.2556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa8975bd9 code=0x0 [ 1185.466682][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2571'. [ 1186.472001][T19312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1186.501825][T19312] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1188.719236][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1202.173161][ T29] audit: type=1400 audit(1720792622.746:722): avc: denied { mounton } for pid=19433 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1202.268600][ T4478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1202.280367][ T4478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1202.290842][ T4478] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1202.300270][ T4478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1202.310253][ T4478] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1202.317765][ T4478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1202.677237][T13536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1202.718035][T13536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1202.746674][T13536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1202.761249][T13536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1202.769244][T13536] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1202.779744][T13536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1202.878191][T19433] lo speed is unknown, defaulting to 1000 [ 1203.243185][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.420717][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.455855][T19438] lo speed is unknown, defaulting to 1000 [ 1203.467285][T19450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1203.493867][ T29] audit: type=1326 audit(1720792624.076:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19427 comm="syz.0.2609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefa8975bd9 code=0x0 [ 1203.618612][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.428125][ T4478] Bluetooth: hci5: command tx timeout [ 1204.663209][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.930778][ T4478] Bluetooth: hci2: command tx timeout [ 1206.737636][ T4478] Bluetooth: hci5: command tx timeout [ 1207.533580][T13536] Bluetooth: hci2: command tx timeout [ 1209.626975][ T4478] Bluetooth: hci5: command tx timeout [ 1209.632434][ T4478] Bluetooth: hci2: command tx timeout [ 1210.075960][T19470] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2617'. [ 1210.146618][T19470] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1210.543819][ T11] bridge_slave_1: left allmulticast mode [ 1210.599569][ T11] bridge_slave_1: left promiscuous mode [ 1210.621975][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.651520][T19484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1210.663589][ T11] bridge_slave_0: left allmulticast mode [ 1210.695267][ T11] bridge_slave_0: left promiscuous mode [ 1210.726006][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.788495][T19486] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1210.912263][T19487] rdma_rxe: rxe_newlink: failed to add lo [ 1210.999576][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 1211.607118][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.638230][ T11] bond_slave_0: left promiscuous mode [ 1211.654274][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.664281][ T11] bond_slave_1: left promiscuous mode [ 1211.675953][ T11] bond0 (unregistering): Released all slaves [ 1211.696584][ T4478] Bluetooth: hci5: command tx timeout [ 1211.702077][T17275] Bluetooth: hci2: command tx timeout [ 1211.827504][T19433] chnl_net:caif_netlink_parms(): no params data found [ 1211.850827][T19485] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2620'. [ 1212.155106][T19504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2624'. [ 1212.384864][T19438] chnl_net:caif_netlink_parms(): no params data found [ 1215.057121][T19433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.187405][T19433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.804821][T19433] bridge_slave_0: entered allmulticast mode [ 1216.830779][T19433] bridge_slave_0: entered promiscuous mode [ 1217.033073][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.057477][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.484744][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.602619][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.909670][ T11] veth1_macvtap: left promiscuous mode [ 1217.976499][ T11] veth0_macvtap: left promiscuous mode [ 1218.016009][ T11] veth1_vlan: left promiscuous mode [ 1218.106384][ T11] veth0_vlan: left promiscuous mode [ 1218.447042][T19551] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1218.583445][ T11] infiniband syz1: set down [ 1219.379891][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 1220.032305][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1220.114671][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1220.844295][ T5338] smc: removing ib device syz1 [ 1220.871052][T19433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.904659][T19433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.922207][T19433] bridge_slave_1: entered allmulticast mode [ 1220.950305][T19433] bridge_slave_1: entered promiscuous mode [ 1221.062359][T19550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2631'. [ 1221.291062][ T5136] lo speed is unknown, defaulting to 1000 [ 1221.713765][T19580] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1221.731181][T19438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.749461][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.769286][T19438] bridge_slave_0: entered allmulticast mode [ 1221.783338][T19438] bridge_slave_0: entered promiscuous mode [ 1221.833718][T19438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.879950][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.908769][T19438] bridge_slave_1: entered allmulticast mode [ 1221.953182][T19438] bridge_slave_1: entered promiscuous mode [ 1221.972614][T19577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1222.032516][T19433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.055100][T19578] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2636'. [ 1222.225907][T19433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.792238][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2640'. [ 1227.822251][T19438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.975196][T19433] team0: Port device team_slave_0 added [ 1228.064991][T19438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.198065][T19433] team0: Port device team_slave_1 added [ 1228.246646][T19595] rdma_rxe: rxe_newlink: failed to add lo [ 1228.775875][T19438] team0: Port device team_slave_0 added [ 1228.801013][T19438] team0: Port device team_slave_1 added [ 1228.822144][T19433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.851584][T19433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.877483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1228.893465][T19433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.962056][T19433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.972459][T19433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.021460][T19433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.052774][T19601] FAULT_INJECTION: forcing a failure. [ 1229.052774][T19601] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.107249][T19438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.114234][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.140219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.150484][T19438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.172177][T19601] CPU: 0 PID: 19601 Comm: syz.4.2642 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1229.182352][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1229.192412][T19601] Call Trace: [ 1229.195710][T19601] [ 1229.198657][T19601] dump_stack_lvl+0x16c/0x1f0 [ 1229.203368][T19601] should_fail_ex+0x497/0x5b0 [ 1229.208068][T19601] should_failslab+0x9/0x20 [ 1229.212603][T19601] kmalloc_trace_noprof+0x6b/0x300 [ 1229.217742][T19601] ? wakeup_source_device_create+0x46/0x2a0 [ 1229.223664][T19601] wakeup_source_device_create+0x46/0x2a0 [ 1229.229412][T19601] wakeup_source_sysfs_add+0x1c/0x90 [ 1229.234724][T19601] wakeup_source_register+0xaa/0x140 [ 1229.240036][T19601] ep_create_wakeup_source+0x1df/0x2e0 [ 1229.245529][T19601] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1229.251539][T19601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1229.256935][T19601] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 1229.262328][T19601] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 1229.267982][T19601] do_epoll_ctl+0x1deb/0x3570 [ 1229.272688][T19601] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1229.277738][T19601] ? __pfx___might_resched+0x10/0x10 [ 1229.283043][T19601] ? __might_fault+0xe3/0x190 [ 1229.287741][T19601] ? __x64_sys_epoll_ctl+0x15d/0x1e0 [ 1229.293041][T19601] __x64_sys_epoll_ctl+0x15d/0x1e0 [ 1229.298172][T19601] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1229.303824][T19601] do_syscall_64+0xcd/0x250 [ 1229.308359][T19601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.314282][T19601] RIP: 0033:0x7fd239b75bd9 [ 1229.318708][T19601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.338338][T19601] RSP: 002b:00007fd23aa11048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1229.346780][T19601] RAX: ffffffffffffffda RBX: 00007fd239d03f60 RCX: 00007fd239b75bd9 [ 1229.354772][T19601] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 1229.362758][T19601] RBP: 00007fd23aa110a0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.370756][T19601] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 1229.378756][T19601] R13: 000000000000000b R14: 00007fd239d03f60 R15: 00007fffe0d26ba8 [ 1229.386760][T19601] [ 1229.475391][T19438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.499567][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.587420][T19438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.695924][T19433] hsr_slave_0: entered promiscuous mode [ 1229.766882][T19433] hsr_slave_1: entered promiscuous mode [ 1229.787271][T19433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.812869][T19433] Cannot create hsr debugfs directory [ 1230.009772][T19438] hsr_slave_0: entered promiscuous mode [ 1230.036717][T19438] hsr_slave_1: entered promiscuous mode [ 1230.063857][T19438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.084753][T19438] Cannot create hsr debugfs directory [ 1230.177914][T19008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.505699][T19008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.784140][T19008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.924612][T19008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.003197][T19625] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2647'. [ 1231.052436][T19628] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1231.105097][T19627] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2648'. [ 1231.220915][T17275] Bluetooth: hci1: command 0x0406 tx timeout [ 1232.804244][T19637] team_slave_0: entered promiscuous mode [ 1232.810079][T19637] team_slave_1: entered promiscuous mode [ 1232.825411][T19637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1232.843875][T19637] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1233.100141][T19008] bridge_slave_1: left allmulticast mode [ 1233.119124][T19008] bridge_slave_1: left promiscuous mode [ 1233.140028][T19008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.176668][T19008] bridge_slave_0: left allmulticast mode [ 1233.196786][T19008] bridge_slave_0: left promiscuous mode [ 1233.202624][T19008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.361556][T17275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1233.375048][T17275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1233.384706][T17275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1233.397921][T17275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1233.408286][T17275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1233.417804][T17275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1234.078679][T19008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.090109][T19008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.102182][T19008] bond0 (unregistering): Released all slaves [ 1234.113781][T19642] @: renamed from vlan0 (while UP) [ 1234.375412][T19653] wg2: entered promiscuous mode [ 1234.382678][T19653] wg2: entered allmulticast mode [ 1234.660963][T19008] hsr_slave_0: left promiscuous mode [ 1234.679004][T19008] hsr_slave_1: left promiscuous mode [ 1234.690971][T19008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.705586][T19008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.719932][T19008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.732271][T19008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.792983][T19008] veth1_macvtap: left promiscuous mode [ 1234.799086][T19008] veth0_macvtap: left promiscuous mode [ 1234.806419][T19008] veth1_vlan: left promiscuous mode [ 1234.813771][T19008] veth0_vlan: left promiscuous mode [ 1235.429132][T19667] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1235.456297][T17275] Bluetooth: hci4: command tx timeout [ 1235.789035][T19008] team0 (unregistering): Port device team_slave_1 removed [ 1235.852702][T19008] team0 (unregistering): Port device team_slave_0 removed [ 1236.526473][T19662] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2657'. [ 1236.544875][T19666] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2658'. [ 1237.537643][T17275] Bluetooth: hci4: command tx timeout [ 1237.925639][T19649] chnl_net:caif_netlink_parms(): no params data found [ 1238.015344][T19438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1238.050507][ T29] audit: type=1400 audit(1720792658.636:724): avc: denied { read } for pid=19683 comm="syz.1.2663" path="socket:[68505]" dev="sockfs" ino=68505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1238.074856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.175864][T19438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1238.190151][T19438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1238.265724][T19438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1238.298907][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.306390][T19649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.313610][T19649] bridge_slave_0: entered allmulticast mode [ 1238.320879][T19649] bridge_slave_0: entered promiscuous mode [ 1238.345698][T19649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.355304][ T29] audit: type=1400 audit(1720792658.926:725): avc: denied { setcheckreqprot } for pid=19683 comm="syz.1.2663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1238.384978][T19649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.392374][T19649] bridge_slave_1: entered allmulticast mode [ 1238.400371][T19649] bridge_slave_1: entered promiscuous mode [ 1238.411225][T19433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1238.463640][T19008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.496954][T19433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1238.534030][T19433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1238.547614][T19649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.581222][T19008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.597112][T19433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1238.612127][T19649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.680829][T19008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.730930][T19649] team0: Port device team_slave_0 added [ 1238.745106][T19649] team0: Port device team_slave_1 added [ 1238.787713][T19008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.861795][T19649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.869451][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.898247][T19649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.934005][T19649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.943306][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.970980][T19649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.142878][T19700] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1239.159036][T19649] hsr_slave_0: entered promiscuous mode [ 1239.179398][T19700] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1239.187614][T19649] hsr_slave_1: entered promiscuous mode [ 1239.203854][T19649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1239.219536][T19649] Cannot create hsr debugfs directory [ 1239.317964][T19701] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1239.382291][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.388994][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.616248][T17275] Bluetooth: hci4: command tx timeout [ 1239.722587][T19008] bridge_slave_1: left allmulticast mode [ 1239.728876][T19008] bridge_slave_1: left promiscuous mode [ 1239.734833][T19008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.750242][T19008] bridge_slave_0: left allmulticast mode [ 1239.758774][T19008] bridge_slave_0: left promiscuous mode [ 1239.765853][T19008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.475813][T19008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.501816][T19008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.533656][T19008] bond0 (unregistering): Released all slaves [ 1241.661897][T19438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.706298][T17275] Bluetooth: hci4: command tx timeout [ 1241.961275][T19438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.068399][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.075629][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.101609][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.108852][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.130834][T19433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.253585][T19729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2675'. [ 1242.313993][T19729] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1242.338238][T19008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.347842][T19008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.360510][T19008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.368218][T19008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.392900][T19008] veth1_macvtap: left promiscuous mode [ 1242.402969][T19008] veth0_macvtap: left promiscuous mode [ 1242.412922][T19008] veth1_vlan: left promiscuous mode [ 1242.419261][T19008] veth0_vlan: left promiscuous mode [ 1244.306407][T19008] team0 (unregistering): Port device team_slave_1 removed [ 1244.362981][T19008] team0 (unregistering): Port device team_slave_0 removed [ 1244.462390][ T5136] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1244.676619][T17275] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 1244.684933][T17275] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 1244.705050][ T5136] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1244.723611][ T5136] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1244.733903][ T5136] usb 2-1: can't read configurations, error -71 [ 1245.043545][T19736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2676'. [ 1245.087458][T19433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.172127][T13853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.179359][T13853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.228410][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.235599][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.682274][T19649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1245.748668][T19649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1245.805917][T19649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1245.847566][T19649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1245.984127][T19438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.222324][T19438] veth0_vlan: entered promiscuous mode [ 1246.330677][T19438] veth1_vlan: entered promiscuous mode [ 1246.470596][T19433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.503113][T19649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.554985][T19438] veth0_macvtap: entered promiscuous mode [ 1246.600899][T19438] veth1_macvtap: entered promiscuous mode [ 1246.642958][T19649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.689314][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.696584][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.762601][T13853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.769996][T13853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.812112][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.823558][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.834262][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.845157][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.863522][T19438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.908033][ T29] audit: type=1400 audit(1720792667.486:726): avc: denied { relabelfrom } for pid=19762 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1246.916216][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.947546][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.957779][T19438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.968649][ T29] audit: type=1400 audit(1720792667.496:727): avc: denied { relabelto } for pid=19762 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1246.995072][T19438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.008727][T19438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.102136][T19438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.110959][T19438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.121265][T19438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.130227][T19438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.171658][T19433] veth0_vlan: entered promiscuous mode [ 1247.194477][T19649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.255731][T19433] veth1_vlan: entered promiscuous mode [ 1247.557085][ T5338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.576231][ T5338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.593448][T19433] veth0_macvtap: entered promiscuous mode [ 1247.699294][T19433] veth1_macvtap: entered promiscuous mode [ 1247.714253][T19649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.742733][ T5338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.750828][ T5338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.818712][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.834393][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.850588][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.864153][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.874371][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.887990][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.905001][T19433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.925994][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.944678][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.967231][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.992825][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.025048][T19433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.054771][T19433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.095583][T19433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.189243][T19433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.246456][T19433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.255210][T19433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.292201][T19433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.441838][T19649] veth0_vlan: entered promiscuous mode [ 1248.633449][T19789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1248.829117][T19649] veth1_vlan: entered promiscuous mode [ 1248.907756][T19589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.946435][T19589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.123592][T19589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.134929][T19649] veth0_macvtap: entered promiscuous mode [ 1249.166743][T19589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.370190][T19649] veth1_macvtap: entered promiscuous mode [ 1249.971461][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.990811][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.001113][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.011910][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.022976][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.076336][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.107287][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.146304][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.178605][T19649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.279237][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.339553][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.378515][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.416510][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.466715][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.502834][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.544460][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.587174][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.630360][T19649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.680841][T19649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.728834][T19649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.786203][T19649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.806603][T19649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.205140][T19589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.228606][T19589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.401518][T19589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.457998][T19589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.034152][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.051012][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.062106][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.083496][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.091554][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1253.103851][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1253.239906][ T5338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.605272][ T5338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.974334][ T5338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.128272][ T5338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.147939][ T4478] Bluetooth: hci0: command tx timeout [ 1256.636254][T19883] serio: Serial port ptm0 [ 1256.659021][ T5338] bridge_slave_1: left allmulticast mode [ 1256.671556][ T5338] bridge_slave_1: left promiscuous mode [ 1256.706443][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.779489][ T5338] bridge_slave_0: left allmulticast mode [ 1256.826283][ T5338] bridge_slave_0: left promiscuous mode [ 1256.845286][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.217431][ T4478] Bluetooth: hci0: command tx timeout [ 1257.344788][T19898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13394 sclass=netlink_route_socket pid=19898 comm=syz.4.2723 [ 1257.358223][T19899] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1257.464741][T17275] Bluetooth: hci2: sending frame failed (-49) [ 1257.479573][ T4478] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 1258.023935][T19903] 9pnet_fd: Insufficient options for proto=fd [ 1258.468640][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.519160][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.559395][ T5338] bond0 (unregistering): Released all slaves [ 1258.622556][T19835] chnl_net:caif_netlink_parms(): no params data found [ 1259.363949][ T4478] Bluetooth: hci0: command tx timeout [ 1259.982884][T19835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.996316][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.003646][T19835] bridge_slave_0: entered allmulticast mode [ 1261.107147][T19835] bridge_slave_0: entered promiscuous mode [ 1261.163364][T19835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.236371][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.254073][T19835] bridge_slave_1: entered allmulticast mode [ 1261.282723][T19835] bridge_slave_1: entered promiscuous mode [ 1261.377963][ T4478] Bluetooth: hci0: command tx timeout [ 1261.650948][T19835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.743837][T19835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.960200][ T5338] hsr_slave_0: left promiscuous mode [ 1261.992074][ T5338] hsr_slave_1: left promiscuous mode [ 1262.016272][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.024788][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.040523][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.048647][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.160473][ T5338] veth1_macvtap: left promiscuous mode [ 1262.166500][ T5338] veth0_macvtap: left promiscuous mode [ 1262.173433][ T5338] veth1_vlan: left promiscuous mode [ 1262.179460][ T5338] veth0_vlan: left promiscuous mode [ 1262.320354][T19960] ieee802154 phy0 wpan0: encryption failed: -22 [ 1265.218697][ T5338] team0 (unregistering): Port device team_slave_1 removed [ 1265.311453][ T5338] team0 (unregistering): Port device team_slave_0 removed [ 1266.352867][T19988] @: renamed from vlan0 (while UP) [ 1266.505372][T19835] team0: Port device team_slave_0 added [ 1266.576940][T19835] team0: Port device team_slave_1 added [ 1266.697982][T19835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.761817][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.929266][T19835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.050499][T19835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.112511][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.855963][T19835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.055720][T19835] hsr_slave_0: entered promiscuous mode [ 1268.096563][T19835] hsr_slave_1: entered promiscuous mode [ 1268.128220][T19835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.135830][T19835] Cannot create hsr debugfs directory [ 1269.658717][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2769'. [ 1269.905977][T20056] lo speed is unknown, defaulting to 1000 [ 1269.923409][T20056] lo speed is unknown, defaulting to 1000 [ 1269.935749][T20056] lo speed is unknown, defaulting to 1000 [ 1270.062110][T19835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1270.121499][T19835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1270.192317][T19835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1270.254781][T19835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1270.693040][T20056] infiniband syz1: set active [ 1270.702767][T20056] infiniband syz1: added lo [ 1270.714069][T20056] syz1: rxe_create_cq: returned err = -12 [ 1270.719145][T19835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.730188][T20056] infiniband syz1: Couldn't create ib_mad CQ [ 1270.740609][ T5197] lo speed is unknown, defaulting to 1000 [ 1270.760968][T20056] infiniband syz1: Couldn't open port 1 [ 1270.772505][T19835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.833306][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.840568][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.871508][T20056] RDS/IB: syz1: added [ 1270.884073][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.891399][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.902706][T20056] smc: adding ib device syz1 with port count 1 [ 1270.927382][T20056] smc: ib device syz1 port 1 has pnetid [ 1270.952246][T20056] lo speed is unknown, defaulting to 1000 [ 1271.021487][ T5197] lo speed is unknown, defaulting to 1000 [ 1271.099597][T19835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.569561][T20083] process 'syz.4.2776' launched './file0' with NULL argv: empty string added [ 1271.616207][T20083] 9pnet_virtio: no channels available for device [ 1272.166109][ T29] audit: type=1400 audit(1720792692.166:728): avc: denied { execute_no_trans } for pid=20078 comm="syz.4.2776" path="/99/file0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1272.496895][ T5093] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1272.563431][T20056] lo speed is unknown, defaulting to 1000 [ 1273.426696][ T5093] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.488416][ T5093] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1273.516127][ T5093] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1273.533770][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.552020][T19835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.586921][ T5093] usb 2-1: config 0 descriptor?? [ 1273.818249][T19835] veth0_vlan: entered promiscuous mode [ 1273.891750][T19835] veth1_vlan: entered promiscuous mode [ 1274.018882][T19835] veth0_macvtap: entered promiscuous mode [ 1274.060337][ T5093] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1274.078416][T19835] veth1_macvtap: entered promiscuous mode [ 1274.129278][T20056] lo speed is unknown, defaulting to 1000 [ 1274.143030][ T5093] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1274.159218][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.193874][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.216423][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.229747][ T5093] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1274.242351][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.274203][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.320041][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.359095][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.387344][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.429436][T19835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.479491][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.522914][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.538033][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.563662][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.602716][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.654690][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.704296][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.735547][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.763303][T19835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.811788][T13855] usb 2-1: USB disconnect, device number 15 [ 1274.833661][T19835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.871441][T19835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.894906][T19835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.920301][T19835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.972932][T20056] lo speed is unknown, defaulting to 1000 [ 1275.233914][T19589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.279917][T19589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.385580][T19589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.431045][T19589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.603620][T20056] lo speed is unknown, defaulting to 1000 [ 1276.006483][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 1276.645874][T20138] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2792'. [ 1276.717292][T20140] No memory to map [ 1276.725943][T20138] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1278.451156][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 1278.789775][T20162] rdma_rxe: rxe_newlink: failed to add lo [ 1279.249206][T20173] lo speed is unknown, defaulting to 1000 [ 1281.479137][T20193] @: renamed from vlan0 (while UP) [ 1283.322933][T20209] lo speed is unknown, defaulting to 1000 [ 1285.190006][T20238] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2820'. [ 1285.275157][T20238] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1288.425226][T20262] wg2: entered promiscuous mode [ 1288.452705][T20262] wg2: entered allmulticast mode [ 1289.440615][T20288] lo speed is unknown, defaulting to 1000 [ 1290.243494][T20296] @: renamed from vlan0 (while UP) [ 1290.293299][T20298] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1291.324054][T20315] binder: 20312:20315 ioctl 4018620d 0 returned -22 [ 1294.280565][T20342] lo speed is unknown, defaulting to 1000 [ 1297.881594][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2856'. [ 1298.630878][T20379] binder: 20376:20379 ioctl 4018620d 0 returned -22 [ 1299.239709][T20383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1299.463744][T20380] rdma_rxe: rxe_newlink: failed to add lo [ 1300.510897][T20383] rdma_rxe: rxe_newlink: failed to add lo [ 1300.823766][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.836432][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.098411][T20412] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2865'. [ 1301.260360][T20412] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1301.892322][T20417] lo speed is unknown, defaulting to 1000 [ 1308.474247][T20454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2875'. [ 1308.641790][T20454] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1308.697006][T17275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1308.715184][T17275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1308.723839][T17275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1308.734418][T17275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1308.774131][T17275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1308.793650][T17275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1309.118504][ T5332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.287429][T20470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1309.361264][ T29] audit: type=1326 audit(1720792729.946:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20448 comm="syz.0.2876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3896b75bd9 code=0x0 [ 1309.791398][T20462] lo speed is unknown, defaulting to 1000 [ 1310.286278][ T5332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.307745][T20473] wg2: entered promiscuous mode [ 1310.322012][T20473] wg2: entered allmulticast mode [ 1310.430404][ T5332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.554001][ T5332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.896355][ T4478] Bluetooth: hci1: command tx timeout [ 1311.549995][ T5332] bridge_slave_1: left allmulticast mode [ 1311.555676][ T5332] bridge_slave_1: left promiscuous mode [ 1311.581924][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.603358][ T5332] bridge_slave_0: left allmulticast mode [ 1311.616444][ T5332] bridge_slave_0: left promiscuous mode [ 1311.650917][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.970798][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.984334][ T4478] Bluetooth: hci1: command tx timeout [ 1313.010067][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.027315][ T5332] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1313.038002][ T5332] team_slave_0: left promiscuous mode [ 1313.043485][ T5332] team_slave_1: left promiscuous mode [ 1313.062238][ T5332] bond0 (unregistering): Released all slaves [ 1313.242312][T20462] chnl_net:caif_netlink_parms(): no params data found [ 1313.276276][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2893'. [ 1313.652208][T20521] syz1: rxe_newlink: already configured on lo [ 1314.759015][T20537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1314.784099][ T29] audit: type=1326 audit(1720792735.366:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.1.2890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2775bd9 code=0x0 [ 1314.871972][T20462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.915860][T20462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.966615][T20462] bridge_slave_0: entered allmulticast mode [ 1315.200721][ T4478] Bluetooth: hci1: command tx timeout [ 1315.819937][T20462] bridge_slave_0: entered promiscuous mode [ 1315.937354][T20462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.944559][T20462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.952433][T20462] bridge_slave_1: entered allmulticast mode [ 1315.986884][T20462] bridge_slave_1: entered promiscuous mode [ 1316.712460][T20462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.900569][ T5332] hsr_slave_0: left promiscuous mode [ 1316.969968][ T5332] hsr_slave_1: left promiscuous mode [ 1317.068084][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.135188][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.275420][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.293238][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.417694][ T5332] veth1_macvtap: left promiscuous mode [ 1317.423293][ T5332] veth0_macvtap: left promiscuous mode [ 1317.479455][ T5332] veth1_vlan: left promiscuous mode [ 1317.516284][ T5332] veth0_vlan: left promiscuous mode [ 1317.966300][ T4478] Bluetooth: hci1: command tx timeout [ 1319.062463][T20576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1319.235749][T20577] rdma_rxe: rxe_newlink: failed to add lo [ 1319.651893][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 1319.749107][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 1320.038232][T20585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1320.078860][ T29] audit: type=1326 audit(1720792740.666:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20580 comm="syz.0.2908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3896b75bd9 code=0x0 [ 1320.832060][T20462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.144333][T20462] team0: Port device team_slave_0 added [ 1321.212868][T20462] team0: Port device team_slave_1 added [ 1321.803884][T20462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.890180][T20462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.067408][T20462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.081916][T20462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.088943][T20462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.124719][T20462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.160750][T20462] hsr_slave_0: entered promiscuous mode [ 1323.206774][T20462] hsr_slave_1: entered promiscuous mode [ 1323.266469][T20462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.283673][T20462] Cannot create hsr debugfs directory [ 1323.411978][T20620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1323.597134][T20623] rdma_rxe: rxe_newlink: failed to add lo [ 1324.416233][T14311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1324.523111][T20633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1324.573212][ T29] audit: type=1326 audit(1720792745.136:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.0.2919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3896b75bd9 code=0x0 [ 1324.579562][T20462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1324.635711][T20462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1324.650047][T14311] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 1324.675557][T20462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1324.693981][T14311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.713767][T20462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1324.731647][T14311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1324.757161][T14311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.792149][T14311] usb 2-1: Product: syz [ 1324.806264][T14311] usb 2-1: Manufacturer:   [ 1324.811028][T14311] usb 2-1: SerialNumber: syz [ 1325.157687][T14311] usb 2-1: 0:2 : does not exist [ 1325.217610][T20462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.258468][T20462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.279669][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.286962][T19741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.299764][T14311] usb 2-1: USB disconnect, device number 16 [ 1325.314862][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.322169][T19741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.867641][T20629] udevd[20629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.812994][T20462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.156687][T20669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1327.331353][T20673] syz1: rxe_newlink: already configured on lo [ 1328.576271][T17275] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.671218][T20462] veth0_vlan: entered promiscuous mode [ 1328.711969][T20682] FAULT_INJECTION: forcing a failure. [ 1328.711969][T20682] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.732873][T20462] veth1_vlan: entered promiscuous mode [ 1328.757066][T20682] CPU: 0 PID: 20682 Comm: syz.2.2934 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1328.767281][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1328.777362][T20682] Call Trace: [ 1328.780661][T20682] [ 1328.783617][T20682] dump_stack_lvl+0x16c/0x1f0 [ 1328.788322][T20682] should_fail_ex+0x497/0x5b0 [ 1328.793022][T20682] should_failslab+0x9/0x20 [ 1328.797554][T20682] __kmalloc_noprof+0xcf/0x410 [ 1328.802349][T20682] video_usercopy+0x1ac/0x1600 [ 1328.807145][T20682] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 1328.813690][T20682] ? __pfx___video_do_ioctl+0x10/0x10 [ 1328.819092][T20682] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1328.825973][T20682] ? __pfx_video_usercopy+0x10/0x10 [ 1328.831200][T20682] ? selinux_file_ioctl+0x180/0x270 [ 1328.836427][T20682] v4l2_ioctl+0x1c0/0x260 [ 1328.840788][T20682] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1328.845667][T20682] __x64_sys_ioctl+0x193/0x220 [ 1328.850458][T20682] do_syscall_64+0xcd/0x250 [ 1328.854994][T20682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.860921][T20682] RIP: 0033:0x7f1029375bd9 [ 1328.865355][T20682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.884990][T20682] RSP: 002b:00007f102a137048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.893438][T20682] RAX: ffffffffffffffda RBX: 00007f1029503f60 RCX: 00007f1029375bd9 [ 1328.901438][T20682] RDX: 0000000020000080 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1328.909437][T20682] RBP: 00007f102a1370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.917434][T20682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.925434][T20682] R13: 000000000000000b R14: 00007f1029503f60 R15: 00007ffdc1c737c8 [ 1328.933435][T20682] [ 1329.233547][T20462] veth0_macvtap: entered promiscuous mode [ 1329.294098][T20462] veth1_macvtap: entered promiscuous mode [ 1329.391135][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.412020][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.419602][ T29] audit: type=1400 audit(1720792750.006:733): avc: denied { create } for pid=20693 comm="syz.3.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1329.432264][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.494616][ T29] audit: type=1326 audit(1720792750.066:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20693 comm="syz.3.2939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaaef75bd9 code=0x0 [ 1330.376255][ T29] audit: type=1400 audit(1720792750.946:735): avc: denied { sys_admin } for pid=20693 comm="syz.3.2939" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1330.407698][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.466474][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.545296][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.592423][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.648564][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.695506][T20462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.762410][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.813750][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.836229][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.857833][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.876143][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.896213][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.910571][T20462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.021475][T20462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.178963][T20462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.231896][T20462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.346205][T20462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.380309][T20462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.398481][T20462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.550291][T20718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'. [ 1331.574720][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.587140][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.626263][T14311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1331.766871][T20719] rdma_rxe: rxe_newlink: failed to add lo [ 1331.774536][ T5338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.792727][ T5338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.843719][T14311] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 1331.886917][T14311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.939090][T14311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1331.958410][T14311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.984867][T14311] usb 2-1: Product: syz [ 1331.998872][T14311] usb 2-1: Manufacturer:   [ 1332.015799][T14311] usb 2-1: SerialNumber: syz [ 1332.287195][T14311] usb 2-1: 0:2 : does not exist [ 1332.371184][T14311] usb 2-1: USB disconnect, device number 17 [ 1332.627339][T20629] udevd[20629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.741201][ T29] audit: type=1326 audit(1720792753.326:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1029375bd9 code=0x7fc00000 [ 1332.796443][ T29] audit: type=1326 audit(1720792753.376:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1029375bd9 code=0x7fc00000 [ 1333.447868][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1333.525012][ T29] audit: type=1326 audit(1720792754.096:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1029375bd9 code=0x7fc00000 [ 1334.340787][T20762] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1334.367975][T20762] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1336.695074][T20784] input: syz0 as /devices/virtual/input/input13 [ 1336.776416][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1337.035365][T20787] rdma_rxe: rxe_newlink: failed to add lo [ 1337.059829][T20793] FAULT_INJECTION: forcing a failure. [ 1337.059829][T20793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.076580][T20793] CPU: 0 PID: 20793 Comm: syz.3.2965 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1337.086776][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1337.096859][T20793] Call Trace: [ 1337.100153][T20793] [ 1337.103098][T20793] dump_stack_lvl+0x16c/0x1f0 [ 1337.107803][T20793] should_fail_ex+0x497/0x5b0 [ 1337.112504][T20793] _copy_to_iter+0x2a1/0x1140 [ 1337.117203][T20793] ? __mutex_lock+0x1a6/0x9c0 [ 1337.121902][T20793] ? __pfx__copy_to_iter+0x10/0x10 [ 1337.127037][T20793] ? avc_has_perm_noaudit+0x119/0x3a0 [ 1337.132436][T20793] ? __pfx___mutex_lock+0x10/0x10 [ 1337.137489][T20793] copy_page_to_iter+0xf1/0x180 [ 1337.142362][T20793] pipe_read+0x543/0x1400 [ 1337.146720][T20793] ? mark_lock+0xb5/0xc60 [ 1337.151074][T20793] ? __pfx_pipe_read+0x10/0x10 [ 1337.155862][T20793] ? inode_has_perm+0x16f/0x1d0 [ 1337.160739][T20793] ? file_has_perm+0x286/0x360 [ 1337.165530][T20793] ? __pfx_file_has_perm+0x10/0x10 [ 1337.170669][T20793] do_iter_readv_writev+0x5e6/0x780 [ 1337.175895][T20793] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1337.181639][T20793] ? selinux_file_permission+0x125/0x590 [ 1337.187294][T20793] ? security_file_permission+0x98/0xc0 [ 1337.192859][T20793] vfs_readv+0x4d8/0x8a0 [ 1337.197132][T20793] ? __pfx_vfs_readv+0x10/0x10 [ 1337.201917][T20793] ? __fget_files+0x24c/0x400 [ 1337.206625][T20793] ? do_readv+0x287/0x370 [ 1337.210971][T20793] do_readv+0x287/0x370 [ 1337.215146][T20793] ? __pfx_do_readv+0x10/0x10 [ 1337.219844][T20793] do_syscall_64+0xcd/0x250 [ 1337.224373][T20793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.230293][T20793] RIP: 0033:0x7fdaaef75bd9 [ 1337.234721][T20793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.254352][T20793] RSP: 002b:00007fdaafcd0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1337.262796][T20793] RAX: ffffffffffffffda RBX: 00007fdaaf104038 RCX: 00007fdaaef75bd9 [ 1337.270789][T20793] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1337.278780][T20793] RBP: 00007fdaafcd00a0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.286774][T20793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.294763][T20793] R13: 000000000000006e R14: 00007fdaaf104038 R15: 00007ffc1e11e6f8 [ 1337.302767][T20793] [ 1337.305886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1337.631982][ T29] audit: type=1326 audit(1720792758.206:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20796 comm="syz.0.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896b75bd9 code=0x7fc00000 [ 1337.707004][ T29] audit: type=1326 audit(1720792758.256:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20796 comm="syz.0.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3896b75bd9 code=0x7fc00000 [ 1338.050578][T20812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1338.119264][T20812] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1338.364897][ T29] audit: type=1326 audit(1720792758.946:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20796 comm="syz.0.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896b75bd9 code=0x7fc00000 [ 1339.621622][ T29] audit: type=1400 audit(1720792760.206:742): avc: denied { getopt } for pid=20835 comm="syz.2.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1339.641066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.347591][T20863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2985'. [ 1341.380508][T20863] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1341.522273][T20864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2986'. [ 1341.594613][T20864] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1349.270210][T20977] FAULT_INJECTION: forcing a failure. [ 1349.270210][T20977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.287820][T20977] CPU: 0 PID: 20977 Comm: syz.2.3023 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 1349.298023][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1349.308105][T20977] Call Trace: [ 1349.311416][T20977] [ 1349.314368][T20977] dump_stack_lvl+0x16c/0x1f0 [ 1349.319075][T20977] should_fail_ex+0x497/0x5b0 [ 1349.323784][T20977] _copy_from_iter+0x2a1/0x1140 [ 1349.328666][T20977] ? __pfx__copy_from_iter+0x10/0x10 [ 1349.333976][T20977] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1349.339979][T20977] ? tun_build_skb.constprop.0+0x198/0x1250 [ 1349.345909][T20977] ? __pfx_lock_release+0x10/0x10 [ 1349.350966][T20977] ? mark_lock+0xb5/0xc60 [ 1349.355325][T20977] copy_page_from_iter+0xa5/0x120 [ 1349.360378][T20977] tun_build_skb.constprop.0+0x274/0x1250 [ 1349.366132][T20977] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1349.372315][T20977] ? hlock_class+0x4e/0x130 [ 1349.376841][T20977] ? __lock_acquire+0xc5d/0x3b30 [ 1349.381811][T20977] tun_get_user+0x888/0x3c30 [ 1349.386431][T20977] ? __pfx_tun_get_user+0x10/0x10 [ 1349.391481][T20977] ? find_held_lock+0x2d/0x110 [ 1349.396271][T20977] ? __pfx_lock_release+0x10/0x10 [ 1349.401328][T20977] tun_chr_write_iter+0xe8/0x210 [ 1349.406296][T20977] vfs_write+0x6b6/0x1140 [ 1349.410657][T20977] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1349.416238][T20977] ? __pfx_vfs_write+0x10/0x10 [ 1349.421030][T20977] ? __fget_files+0x256/0x400 [ 1349.425735][T20977] ? __fget_light+0x173/0x210 [ 1349.430437][T20977] ksys_write+0x12f/0x260 [ 1349.434795][T20977] ? __pfx_ksys_write+0x10/0x10 [ 1349.439677][T20977] do_syscall_64+0xcd/0x250 [ 1349.444216][T20977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.450146][T20977] RIP: 0033:0x7f102937475f [ 1349.454581][T20977] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1349.474222][T20977] RSP: 002b:00007f102a137010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1349.482679][T20977] RAX: ffffffffffffffda RBX: 00007f1029503f60 RCX: 00007f102937475f [ 1349.490681][T20977] RDX: 000000000000008e RSI: 0000000020000100 RDI: 00000000000000c8 [ 1349.498675][T20977] RBP: 00007f102a1370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.506669][T20977] R10: 000000000000008e R11: 0000000000000293 R12: 0000000000000001 [ 1349.514663][T20977] R13: 000000000000000b R14: 00007f1029503f60 R15: 00007ffdc1c737c8 [ 1349.522660][T20977] [ 1351.433502][T21015] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1351.492718][T21015] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1351.691117][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 1354.248852][T21041] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1354.276772][T21041] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1354.287973][T21041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1356.154060][T21066] binder: 21055:21066 ioctl 4018620d 0 returned -22 [ 1359.143853][ T29] audit: type=1400 audit(1720792779.726:743): avc: denied { bind } for pid=21079 comm="syz.4.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1359.635084][T21094] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1359.644366][T21094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1359.687557][T21094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1359.706407][T17275] Bluetooth: hci4: command 0x0406 tx timeout [ 1361.517655][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3071'. [ 1362.275031][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.281479][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.492261][ T5332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.774720][ T5332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.933899][ T5332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.109033][T21145] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1363.141061][T21145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1363.150412][T21145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1363.190460][ T5332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.445338][T17275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.458727][T17275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.468295][T17275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.478729][T17275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.493761][T17275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1363.501449][T17275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1363.712824][T21158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1363.787018][ T29] audit: type=1326 audit(1720792784.366:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21148 comm="syz.1.3081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2775bd9 code=0x0 [ 1363.812928][T21151] lo speed is unknown, defaulting to 1000 [ 1363.876292][ T5332] bridge_slave_1: left allmulticast mode [ 1363.882050][ T5332] bridge_slave_1: left promiscuous mode [ 1363.900228][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.962974][ T5332] bridge_slave_0: left allmulticast mode [ 1363.988876][ T5332] bridge_slave_0: left promiscuous mode [ 1363.994729][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.044691][T21163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1365.615634][T21188] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1365.625089][ T4478] Bluetooth: hci2: command tx timeout [ 1365.722025][T21190] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1366.415214][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.456937][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.477465][ T5332] bond0 (unregistering): Released all slaves [ 1366.510203][T21187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1366.525569][T21189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3090'. [ 1366.731421][T21200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3095'. [ 1366.873168][T21204] sctp: [Deprecated]: syz.4.3094 (pid 21204) Use of int in maxseg socket option. [ 1366.873168][T21204] Use struct sctp_assoc_value instead [ 1366.904081][T21206] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1367.726196][ T4478] Bluetooth: hci2: command tx timeout [ 1369.776227][ T4478] Bluetooth: hci2: command tx timeout [ 1371.856354][ T4478] Bluetooth: hci2: command tx timeout [ 1379.699872][T17275] Bluetooth: hci0: command 0x0406 tx timeout [ 1423.702479][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.001066][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 1472.005961][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1472.012931][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19008/1:b..l P21195/1:b..l [ 1472.022656][ C1] rcu: (detected by 1, t=10502 jiffies, g=131217, q=303 ncpus=2) [ 1472.030456][ C1] task:syz.1.3092 state:R running task stack:27872 pid:21195 tgid:21193 ppid:15674 flags:0x00004000 [ 1472.043403][ C1] Call Trace: [ 1472.046684][ C1] [ 1472.049603][ C1] __schedule+0xf15/0x5d00 [ 1472.054011][ C1] ? hlock_class+0x4e/0x130 [ 1472.058503][ C1] ? __pfx___schedule+0x10/0x10 [ 1472.063359][ C1] ? find_held_lock+0x2d/0x110 [ 1472.068111][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1472.073484][ C1] preempt_schedule_common+0x44/0xc0 [ 1472.078778][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1472.083970][ C1] _raw_spin_unlock+0x3e/0x50 [ 1472.088652][ C1] unmap_page_range+0xbc7/0x3f20 [ 1472.093585][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1472.098946][ C1] ? uprobe_munmap+0x20/0x570 [ 1472.103608][ C1] unmap_single_vma+0x194/0x2b0 [ 1472.108452][ C1] unmap_vmas+0x22f/0x490 [ 1472.112771][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1472.117607][ C1] ? __pfx_lock_release+0x10/0x10 [ 1472.122621][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 1472.127740][ C1] exit_mmap+0x1b8/0xb20 [ 1472.131978][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1472.136739][ C1] __mmput+0x12a/0x4d0 [ 1472.140806][ C1] mmput+0x62/0x70 [ 1472.144513][ C1] do_exit+0x9b7/0x2ba0 [ 1472.148663][ C1] ? get_signal+0x8f2/0x2710 [ 1472.153246][ C1] ? __pfx_do_exit+0x10/0x10 [ 1472.157830][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1472.162851][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1472.168248][ C1] do_group_exit+0xd3/0x2a0 [ 1472.172763][ C1] get_signal+0x2616/0x2710 [ 1472.177263][ C1] ? __pfx_get_signal+0x10/0x10 [ 1472.182119][ C1] ? __pfx_do_futex+0x10/0x10 [ 1472.186788][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1472.192323][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1472.198468][ C1] syscall_exit_to_user_mode+0x14a/0x2a0 [ 1472.204092][ C1] do_syscall_64+0xda/0x250 [ 1472.208584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.214471][ C1] RIP: 0033:0x7f5ca2775bd9 [ 1472.219055][ C1] RSP: 002b:00007f5ca349b0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1472.227469][ C1] RAX: fffffffffffffe00 RBX: 00007f5ca2904040 RCX: 00007f5ca2775bd9 [ 1472.235467][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ca2904040 [ 1472.243438][ C1] RBP: 00007f5ca2904038 R08: 00007f5ca349b6c0 R09: 00007f5ca349b6c0 [ 1472.251399][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ca2904044 [ 1472.259363][ C1] R13: 000000000000006e R14: 00007ffc6c5c7680 R15: 00007ffc6c5c7768 [ 1472.267335][ C1] [ 1472.270344][ C1] task:kworker/u8:1 state:R running task stack:24560 pid:19008 tgid:19008 ppid:2 flags:0x00004000 [ 1472.282410][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1472.290214][ C1] Call Trace: [ 1472.293502][ C1] [ 1472.296419][ C1] __schedule+0xf15/0x5d00 [ 1472.300831][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1472.305583][ C1] ? enqueue_to_backlog+0x480/0xdf0 [ 1472.310773][ C1] ? __pfx___schedule+0x10/0x10 [ 1472.315610][ C1] ? hlock_class+0x4e/0x130 [ 1472.320112][ C1] ? mark_held_locks+0x9f/0xe0 [ 1472.324865][ C1] preempt_schedule_irq+0x51/0x90 [ 1472.329878][ C1] irqentry_exit+0x36/0x90 [ 1472.334294][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1472.340321][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 1472.345619][ C1] Code: c1 05 da ac 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 1472.365234][ C1] RSP: 0018:ffffc9000303fa70 EFLAGS: 00000206 [ 1472.371295][ C1] RAX: dffffc0000000000 RBX: 1ffff92000607f50 RCX: 0000000030f0905e [ 1472.379344][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb200 RDI: ffffffff8b903940 [ 1472.387315][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284d858 [ 1472.395390][ C1] R10: ffffffff9426c2c7 R11: 0000000000000003 R12: 0000000000000000 [ 1472.403348][ C1] R13: 0000000000000000 R14: ffffffff8dbb1620 R15: 0000000000000000 [ 1472.411310][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1472.416345][ C1] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 1472.422412][ C1] ? __pfx_lock_release+0x10/0x10 [ 1472.427436][ C1] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 1472.433323][ C1] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 1472.439389][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1472.445709][ C1] ? batadv_send_skb_packet+0x56c/0x6b0 [ 1472.451244][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 1472.458266][ C1] process_one_work+0x9c5/0x1b40 [ 1472.463206][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1472.470755][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1472.476114][ C1] ? assign_work+0x1a0/0x250 [ 1472.480705][ C1] worker_thread+0x6c8/0xf30 [ 1472.485282][ C1] ? __kthread_parkme+0x148/0x220 [ 1472.490294][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1472.495390][ C1] kthread+0x2c1/0x3a0 [ 1472.499445][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1472.504644][ C1] ? __pfx_kthread+0x10/0x10 [ 1472.509225][ C1] ret_from_fork+0x45/0x80 [ 1472.513636][ C1] ? __pfx_kthread+0x10/0x10 [ 1472.518300][ C1] ret_from_fork_asm+0x1a/0x30 [ 1472.523060][ C1] [ 1472.526149][ C1] rcu: rcu_preempt kthread starved for 10420 jiffies! g131217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1472.537414][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1472.547371][ C1] rcu: RCU grace-period kthread stack dump: [ 1472.553253][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1472.564996][ C1] Call Trace: [ 1472.568270][ C1] [ 1472.571190][ C1] __schedule+0xf15/0x5d00 [ 1472.575608][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1472.580824][ C1] ? __pfx___schedule+0x10/0x10 [ 1472.585661][ C1] ? schedule+0x298/0x350 [ 1472.589981][ C1] ? __pfx_lock_release+0x10/0x10 [ 1472.594995][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1472.599924][ C1] ? lock_acquire+0x1b1/0x560 [ 1472.604590][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1472.610042][ C1] schedule+0xe7/0x350 [ 1472.614097][ C1] schedule_timeout+0x136/0x2a0 [ 1472.618944][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1472.624330][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1472.629630][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1472.635517][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1472.640971][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1472.645743][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1472.651055][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1472.656245][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1472.662037][ C1] rcu_gp_kthread+0x271/0x380 [ 1472.666791][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1472.671986][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1472.677171][ C1] ? __kthread_parkme+0x148/0x220 [ 1472.682183][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1472.687373][ C1] kthread+0x2c1/0x3a0 [ 1472.691431][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1472.696621][ C1] ? __pfx_kthread+0x10/0x10 [ 1472.701198][ C1] ret_from_fork+0x45/0x80 [ 1472.705602][ C1] ? __pfx_kthread+0x10/0x10 [ 1472.710186][ C1] ret_from_fork_asm+0x1a/0x30 [ 1472.714942][ C1] [ 1472.717969][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1472.724451][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1472.729647][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20