last executing test programs: 24.860721181s ago: executing program 2 (id=270): r0 = open(0x0, 0x0, 0x100) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') io_uring_enter(r1, 0x5d33, 0xf92f, 0x4, &(0x7f0000000040)={[0x4]}, 0x8) read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) setsockopt$inet_udp_int(r0, 0x11, 0xa48825049445127, &(0x7f0000000080), 0x4) 24.859457889s ago: executing program 2 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 24.78129354s ago: executing program 2 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 24.720999794s ago: executing program 2 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 24.693114471s ago: executing program 2 (id=278): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSBRK(r1, 0x80111500, 0x5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 24.451423404s ago: executing program 2 (id=281): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000e400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 24.404493252s ago: executing program 32 (id=281): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000e400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 23.19122232s ago: executing program 1 (id=287): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x448c0}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000007200000229bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0800010001080000080001000100000008000100e029a62f080001000000000008000100010000000800010000000000080001000000000008000100000000000800010001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40880}, 0x4c092) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x5}, 0x45) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="ba69bbda6ce852542a21c55a68d2f59642ac8eb483baf4dc23f0e860576dc8c29733ddf6b508b9be269fea7c0d518a280fd90f2dbbdb64387187c299b491f9af1f9986649defeb8e4d21a55946497e367291986d039642b0c8b3ae0f7c9150a1e3ca7aba0c51d98c26da492d93794aac2cc05221622548fc7790de1354", 0x7d) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003240)=@gettaction={0x28, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) socket(0x10, 0x3, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x448c0}, 0x20008000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000007200000229bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0800010001080000080001000100000008000100e029a62f080001000000000008000100010000000800010000000000080001000000000008000100000000000800010001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40880}, 0x4c092) (async) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x21) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x5}, 0x45) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="ba69bbda6ce852542a21c55a68d2f59642ac8eb483baf4dc23f0e860576dc8c29733ddf6b508b9be269fea7c0d518a280fd90f2dbbdb64387187c299b491f9af1f9986649defeb8e4d21a55946497e367291986d039642b0c8b3ae0f7c9150a1e3ca7aba0c51d98c26da492d93794aac2cc05221622548fc7790de1354", 0x7d) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003240)=@gettaction={0x28, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) (async) 23.191112165s ago: executing program 1 (id=288): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) 23.090862055s ago: executing program 1 (id=289): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x2c}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r4 = syz_io_uring_setup(0x74d, &(0x7f0000000240)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) io_uring_enter(r4, 0x7ee9, 0x0, 0x47, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\nrtio,nodevmap,C']) read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 23.024145342s ago: executing program 1 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 22.931528907s ago: executing program 1 (id=291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x141580) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) 22.180774155s ago: executing program 3 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 22.178324116s ago: executing program 3 (id=297): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r2, r3, 0x401, 0x0, 0xffffffff, 0x1000, {0xac7c, 0x1, 0x3, 0x67, 0x9, 0x1, 0x2, 0x9, 0x412f, 0xe154, 0xfffe, 0x7f, 0x0, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 22.06137158s ago: executing program 3 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000400016c37ed56cbda3000089f64119790326"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 22.008424076s ago: executing program 3 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 21.940128038s ago: executing program 3 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x747, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000100)={0x6, 0x6a80, 0x1ff, 0x0, 0xe}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) clock_getres(0xeaffffff, 0x0) r8 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='context', &(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) lseek(r7, 0x405, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001400000428bd7000ffdbdf250a8004ff", @ANYRES32=r9, @ANYBLOB="2804000004000058f077522d2f83e3ab000800080084000000"], 0x28}, 0x1, 0x0, 0x0, 0x10000841}, 0x4044810) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@private1, @local, @mcast1, 0x55b, 0xa, 0x5, 0x0, 0x7, 0x4, r9}) 21.237988107s ago: executing program 1 (id=301): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/111, 0x6f}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x18, 0x1, 0x70bd25, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1001f}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x20000000) 21.02976567s ago: executing program 33 (id=301): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/111, 0x6f}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x18, 0x1, 0x70bd25, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1001f}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x20000000) 20.981202426s ago: executing program 3 (id=303): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff13, &(0x7f0000000000)='cgroup\x00'}, 0x7c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x10001, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) (async) syz_io_uring_setup(0x1040, &(0x7f00000001c0)={0x0, 0xabeb, 0x10008, 0x0, 0x134}, &(0x7f0000000240), &(0x7f0000000280)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xc, &(0x7f00000002c0)=[r0], 0x1, 0x0, 0x0, {0x0, r7}}) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x12001, 0x0) (async) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r8, 0x4, 0x3) 20.98070862s ago: executing program 34 (id=303): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff13, &(0x7f0000000000)='cgroup\x00'}, 0x7c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x10001, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) (async) syz_io_uring_setup(0x1040, &(0x7f00000001c0)={0x0, 0xabeb, 0x10008, 0x0, 0x134}, &(0x7f0000000240), &(0x7f0000000280)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xc, &(0x7f00000002c0)=[r0], 0x1, 0x0, 0x0, {0x0, r7}}) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x12001, 0x0) (async) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r8, 0x4, 0x3) 1.580177937s ago: executing program 6 (id=630): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040000003e00210300000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4004094) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000440)={[&(0x7f0000000000)='\x00', &(0x7f0000000540)='\x00\t\xc6\x02\x8f\x91&6`\xfdB\xc5\xa7A\x04*\xa3\xbd\x06\x89G}\xc4\x88\xbf\vI\t\x8b\x83V\xda\x80\xf6\xfa\xad\xd3\xbf\x9e:\xe1f\x9c\x88r\x8b0{\x12PO\xde-\xb2hi\xce\x10\xdd\"\x97\xd2\xb0)\xeaF\xdd\x16\xb0b[\x0f:DT\xa6D:\n\xe5\x96s\xe3`\xdeq\xa5N|\xcb\xaa\x83n\xa6\x97\x17\x11\x97\xec1\xd6\xcf\xef\x8e\x02\x1b\"\xa6\x01\xfb$y\x1f\xca\xf7w%t\x17\x96\xf4\\\xb0\xc58\xd9PJC\x88\xf2\x8e\x1bq\x7f\xf2Z4\x8a\x94?\xc7\x1d\xb6\xbe\xf5<]\xcc\x01\x054rK=O#\xe0\x10\xbd\v\x9e\nk\x1f\xac\xa8\x888\xce62\x05b\xef\xac={\x12\xb6\x11RU\xa0\xdd\xe9\'\xb8', &(0x7f0000000400)='@@[\x00']}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 1.512874615s ago: executing program 6 (id=633): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000200), 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r3, &(0x7f0000000040)=@in, &(0x7f00000001c0)=0x80) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.451059896s ago: executing program 6 (id=636): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x8000, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000040)='jffs2\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.399989691s ago: executing program 4 (id=637): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 1.398219913s ago: executing program 4 (id=639): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) recvmsg$inet_nvme(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0x4102) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 1.331161931s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x320) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x44) 1.270968494s ago: executing program 4 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000004300090000000000000000000300000008000200", @ANYRES32=0x0, @ANYBLOB="3445800cf92d54f05954224623ec78cb10918045a9a3ff89a15d79dc0c3be64f5308a4572621098b5fc2314866b0e4ec5f3e29b9f17fb6ce418f8d1617174b4ec7df08c9855ad5f3abdee8"], 0x1c}}, 0x24000044) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000000000ab284dc9a9409592edce8e027fbff3d72115805745f8a2"], 0xb0) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000003c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x81) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000000000000060027000500000008001d00090000000800010006"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 1.130630657s ago: executing program 5 (id=645): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) (async, rerun: 32) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x6, @pix={0x4, 0x5, 0x31363553, 0x0, 0x7fff, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0x13, @void}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) pread64(r7, &(0x7f0000000200)=""/150, 0x96, 0x92) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000001cc0)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000440)="1022250d0c78a5d3de4c94adfe7b911c775f5571e5f844a1177e4089e8ad15d26210f19b67ecbb998a44ce6d94fdf4651f69f1542164f8e428a5c099276c97608d6bb5b572b35573b608fb337a0686ef53c9b3d54d30ecee091e9d7eadd685ebbfed517d54f7ff6b73f7518559", 0x6d}, {&(0x7f00000004c0)="d65a67f70265e2ee970d251fd28437fae388f52296f0f1efcbcdf462e8de993b6d256ec0dc8ba98bf7d2a68f349750d0f14740004dbc5a1fce067997ab6ab67ff48d861c48e6cbed81be101b4e50407269c8595fcaa299d6451e8af1ef98e675d6360a31de18bf5df4856535eb47ca49cbd26573399c43575e3e2f5de4923515ca706a083969790985c9e8a3dc78c7125f410a9c733b6cfa6246bd68ab5ee66f9b3afe3fc811a03ab0ef954e6e1f43b95303e96c9277c4ea314c0737a344b15a7d286c6b01275d94705dc97ce1861b4f087db34e16816356fbb0df43aa3649970b105eac41b94101050ba09c4c1bfdebd3bd93", 0xf3}, {&(0x7f00000005c0)="7790892e0a0f2b1a98e177cf67f4e5a72ddf8395d4026f832a7b0912993a3db4d5fc8eb990032d9db810c2d9eaced55202ce7baab58661ec1f96448fd1a024d80181ad3d65c841aa31c9c5ec1d3d2b2670b03a914e4bac837e986f075ee011d2ddd7e2c06bf33d121170d58825024ad78ef1e80df18db7b56ad9c8c808e85308c3af89b5d44562371940f26cefcf578e80a4028e1c9e9d5885b635cfd136f120764432", 0xa3}], 0x3, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x3, [{@private=0xa010100, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @rr={0x7, 0x7, 0xed, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4c, 0x52, 0x1, 0xb, [{@local, 0x7}, {@private=0xa010101, 0x9}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xa00}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x26}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x17}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x4}, @rr={0x7, 0x1f, 0x99, [@empty, @multicast1, @rand_addr=0x64010102, @remote, @rand_addr=0x64010102, @multicast2, @empty]}, @generic={0x83, 0x6, "08ddb307"}, @noop, @timestamp={0x44, 0xc, 0x61, 0x0, 0x9, [0x2, 0x200]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xfa, [@multicast1]}, @noop, @generic={0x89, 0x8, "804ab761788f"}, @cipso={0x86, 0x38, 0x3, [{0x0, 0xe, "88c978e12bb69e3c7bb9d121"}, {0x5, 0xe, "e3413612e204000c35a94db4"}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x4, "c9e2"}, {0x5, 0x5, "85dc89"}, {0x5, 0x9, "39187ea11ceb45"}]}, @cipso={0x86, 0x10, 0x0, [{0x1, 0xa, "a8c59bc80545645c"}]}, @rr={0x7, 0xb, 0x5, [@rand_addr=0x64010101, @empty]}]}}}], 0x1d8}}, {{&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="2d1d3786913c171f53ad3c22adc5f8374097ece232c6a56c6a77704a6b3625211e1e31dfa0bc0a84d0d9cb49a645a74c827eb3890e684d09ad78a4476c653f9cc27ac4ce08569346e987cb4d6dd92f41a0ea84f42bf55e87eda174120090370010fabf3cc53b2d052c1279c309a80adf1b09cec8e0093fb5f52a191103db123ba85ff857cb759927701c7780dddff3df9f34362739d52a2e2d4f207ee83602cb228971ed2073d1554073707990da38bed0c623ab39b6640656a25727fcc644df202b90a42751c36954", 0xc9}], 0x1, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x414}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x46, [@multicast1, @broadcast, @multicast1, @local, @loopback]}, @noop, @timestamp_prespec={0x44, 0xc, 0xae, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xd5}]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0x4, [{@loopback, 0x2}, {@loopback}, {@multicast2, 0x6}]}]}}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000b00)="0f2cb1f5241d74c275b216616b93d4102b3d191de915ba53c9d68b845f6488325ce6f2", 0x23}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)}], 0x3, &(0x7f0000001bc0)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x28, [@multicast1, @loopback, @remote, @empty, @remote, @local, @broadcast, @local]}, @end, @cipso={0x86, 0x19, 0x3, [{0x6, 0xf, "6c057ab693b6914802960f206f"}, {0x0, 0x4, 'aU'}]}, @generic={0x89, 0x4, "629c"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x62}}, @ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x6a, [@rand_addr=0x64010102, @private=0xa010101, @loopback, @loopback, @loopback, @rand_addr=0x64010101, @loopback, @local, @multicast1, @broadcast]}, @noop, @ssrr={0x89, 0x1b, 0xe4, [@rand_addr=0x64010100, @multicast1, @remote, @remote, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @generic={0x82, 0xb, "a83f63d141be33fe5d"}, @end]}}}], 0xf0}}], 0x3, 0x0) (async, rerun: 64) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) (rerun: 64) write$binfmt_script(r12, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x7, 0x1fc}, 'syz1\x00', 0xd}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000004d40)={0x2020}, 0x2020) 1.130304376s ago: executing program 5 (id=646): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x1a) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000040)='1\x00', 0x2) 986.955216ms ago: executing program 4 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000001780)=[{r1, 0x2108}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f00000056c0), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x5c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000051) 986.503435ms ago: executing program 5 (id=648): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x3, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) r9 = socket$packet(0x11, 0x3, 0x300) (async) open$dir(0x0, 0x8000, 0x10c) sendto$packet(r9, &(0x7f00000007c0)="363c8f3fca5d66571e583e7c88a84d0502a16d9a0d897ef0f9c10c2664bba8b343f47f0b794037fa36c86b26e49dffc326e3961595ca0361592ba1775b6eec48672ca1bb98d5936458bbbcf0a5c2c4595f3e7a2d508f244079dab0142846b31e086c3d148725", 0x66, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x81, 0x6, @random="14fc55e0eb0c"}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r10, 0x1, 0x6, @local}, 0x10) (async) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') (async) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) 986.129669ms ago: executing program 5 (id=649): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x1) write$binfmt_script(r1, &(0x7f00000019c0)={'#! ', './file1/../file0', [{0x20, '\xd1r2|\x9c\xdc\x04*Z6\xd2O}$.%{\x06G\xc5@5A\xe5c\tp\xce\x84\xa1\xc4\x992\xb6\x17\x88Q\x1ex\x7f\xe1\x98o\xdb\x13\x92\xf6I\xbb\xd5H\xf4A\x87\x1e/3\x85\xf6\xcc\xab\xefAa5*\x00\x00\x00\x00\xe6c\'~\xf2\x81~\x89E\xbe\x17\x9e\xb6\xc3-\xd2\xf0\xb4\x13\x97{\xd8\xdc\xad\x80\xd2^\xd0}a2\x9e#\x18\xb9\x11\xa1\xe9V\x99\xef\xfe{\x90\xe0\fcM\xeb\xf5\xdb\xaf\xf2\x8a%\"\x90\x8e~N\xaa\xa6\xa2N\xf3\x90g\xef\x15P\xab\x1b\x8c\x8a|\f\xefm\xcf\xff\xebp\x8df{_'}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec1372"}, 0xdc) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd000000030000000000000000001400"}}) 911.264721ms ago: executing program 4 (id=650): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x8000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r8, &(0x7f00000013c0)=""/15, 0xf, 0x404) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 911.034639ms ago: executing program 5 (id=651): socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="180c4552", 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0x133}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 760.499955ms ago: executing program 5 (id=652): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x4, 0x0, 0x3, 0x1}, 0x8) 309.362897ms ago: executing program 6 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0xa1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609008fc032ab2400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2e0755a9c87366e0c61c5195ff09d433f4c5faefbea3429bff9428909e04565e80e6a1747f8c659807476ecd210bfa506d57f00d7ca8226be17f96cdf59d5a6d81793ed800477f913cad3ead407cf96e7bec361adfe3736abce455296f2f595d4ae6832f500f6690ca9f229a2a7a73d220ee248716c7db154e08986804a20d4021369dc6e1f16cfcb2b49638e053f700e74509583acb1dddd7af85d58777e290d4eb989161ea70e5b744149452691822e637c6680b02873d24c23478a2d61c"], 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x10180, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, r4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffda3, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r11 = dup(r10) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',access=any,access=client,cache=mmap']) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r12, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r12, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) move_mount(r11, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x65) 309.16123ms ago: executing program 0 (id=654): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f0000000200)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xfbc, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) 284.335102ms ago: executing program 0 (id=655): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = eventfd2(0xc, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3, r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) eventfd2(0xc, 0x1) (async) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3, r1}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="320200000200000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6400767b65746f6f7e05"], 0x232) (async) 199.406713ms ago: executing program 0 (id=656): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=virtio,msize=000000000003525,\x00']) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc00, 0x150) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000140)='9p\x00', &(0x7f0000000180)='(($)\'-\x00', &(0x7f0000000200)='}{)[,A\'$)\x00']}, &(0x7f0000000300)={[&(0x7f0000000280)='^-\x00', &(0x7f00000002c0)='syz\x00']}, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x80008000, {0x0, 0x0, 0x0, r7, {0x5, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) 129.085205ms ago: executing program 6 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0xac, r3, 0x206, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x400}, 0x53526d7ae518a30) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="04000000", @ANYRES16=r2, @ANYBLOB="100004000000fedbdf250c0000004c0003800800020003000000080002000500000008000200feffffff08000100070000000800020009000000080001000000000008000200000000000800030003000000080003000000000004000180700002800400040008000200f24800003c000380080002000100000008000100060000000800010009000000080002000800000008000100ff03000008000200020000000800020006000000240003800800010001000080080002000100000008000100bc00000008000100050000000c000380080003009c310000480007800c00040002000000000000000c00030002000000000000000c00030009000000000000000c000300dc000000000000000c0003000600000000000000080002000e000000cc000580080001006574680008000100756470001400028008000400a00c000008000300ff070000240002800800030088000000080002006f2b000008000200f700000008000200080000000c000280080001001100000008000100756470002c000280080001001a000000080002000012000008000400000100000800020000000000080003000900000007000100696200002c000280080001000700000008000300010100000800040004000000080002000800000008000100080000000c00028008000400030000000c0009800800010000000000b4000280140003800800010008000000080001000500000008000100ff070000080001007f0000002c0003800800020000000080080001000200000008000200e2030000080002000900000008000100090000001c00038008000200001000000800010001000000080001000300000008000100000800003c000380080002000800000008000200080000000800020006000000080001000500000008000200ff0f000008000200000000000800020008000000"], 0x2b4}, 0x1, 0x0, 0x0, 0x4c850}, 0x4040050) socket$netlink(0x10, 0x3, 0x4) 55.916589ms ago: executing program 6 (id=658): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020c0008130000002cbd"], 0x94}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x141580) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) 55.383742ms ago: executing program 0 (id=659): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000f8541549b670c46a", @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) 186.927µs ago: executing program 0 (id=660): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000004c0)="7cdf8b8cdbeb7168f1561b7936128c3d96a63cef3584d1a9dbd379bf307b64022ce2f5cb857805273406c1cb784963e5e8d46115019079764b4ca9c93e43006c2ef4346d8414cbdbc0c6ae84f36959d7d2014c1e7aa27dbe20d6057ef749012e059ab7e309e143c840d8aa7ca909a1d1c9dac0b9959bdd0c8099754c30160d0576881203301085872d5e1d45f2f2a2f0b8bc4da047c2b11b31b7fc87954bd5437279db5bd27cc5ef439add7c01995188a97e9d17a413597316d76c8b6c18183479", 0xc1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001c40)={&(0x7f0000001c00)=[r2], 0x1, 0x800}) (async) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000000000006000700020000000c000880080012"], 0x3c}}, 0x0) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0xff}, 0x38) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=661): socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={0x0}) syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="180c4552", 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0x133}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) kernel console output (not intermixed with test programs): 53.725144][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.728431][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.732720][ T5932] veth0_vlan: entered promiscuous mode [ 53.755354][ T5932] veth1_vlan: entered promiscuous mode [ 53.766584][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.769076][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.789898][ T5930] veth0_vlan: entered promiscuous mode [ 53.801928][ T5930] veth1_vlan: entered promiscuous mode [ 53.804187][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.810222][ T5932] veth0_macvtap: entered promiscuous mode [ 53.813161][ T5942] veth0_vlan: entered promiscuous mode [ 53.818439][ T5932] veth1_macvtap: entered promiscuous mode [ 53.822703][ T5942] veth1_vlan: entered promiscuous mode [ 53.847363][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.851445][ T5930] veth0_macvtap: entered promiscuous mode [ 53.861387][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.865150][ T5930] veth1_macvtap: entered promiscuous mode [ 53.872913][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 53.872958][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.878805][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.881657][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.885111][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.900532][ T5942] veth0_macvtap: entered promiscuous mode [ 53.905207][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.908801][ T5942] veth1_macvtap: entered promiscuous mode [ 53.917176][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.929105][ T5930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.933075][ T5930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.937282][ T5930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.940462][ T5930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.949850][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.964775][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.978585][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.978662][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.981814][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.985346][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.988063][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.995127][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.020809][ T6021] JFS: discard option not supported on device [ 54.025196][ T6021] syz.3.6: attempt to access beyond end of device [ 54.025196][ T6021] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 54.030421][ T6021] syz.3.6: attempt to access beyond end of device [ 54.030421][ T6021] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 54.036671][ T6021] Mount JFS Failure: -5 [ 54.051047][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.053960][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.062038][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.065230][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.079514][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.082008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.095421][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.097863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.114347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.117418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.191756][ T6031] kvm: pic: single mode not supported [ 54.192376][ T6031] kvm: pic: single mode not supported [ 54.197260][ T6037] evm: overlay not supported [ 55.142916][ T6074] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.16'. [ 55.188709][ T6076] block nbd2: Unsupported socket: shutdown callout must be supported. [ 55.242740][ T6086] batadv_slave_1: entered promiscuous mode [ 55.257339][ T6085] batadv_slave_1: left promiscuous mode [ 55.301770][ T6095] netlink: 696 bytes leftover after parsing attributes in process `syz.2.22'. [ 55.348209][ T6097] /dev/sg0: Can't lookup blockdev [ 55.355255][ T6097] overlay: Unknown parameter 'subj_type' [ 55.362014][ T6101] loop4: detected capacity change from 0 to 7 [ 55.367389][ T6101] Dev loop4: unable to read RDB block 7 [ 55.369335][ T6101] loop4: unable to read partition table [ 55.371203][ T6101] loop4: partition table beyond EOD, truncated [ 55.373183][ T6101] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 55.474488][ T5294] Bluetooth: hci2: command tx timeout [ 55.483665][ T5294] Bluetooth: hci0: command tx timeout [ 55.485681][ T5294] Bluetooth: hci3: command tx timeout [ 55.501701][ T6125] Bluetooth: MGMT ver 1.23 [ 55.507038][ T6125] Bluetooth: hci0: invalid len left 7, exp >= 118 [ 55.510505][ T5294] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 55.538239][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 55.544348][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 55.548814][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 55.552170][ T6128] wg2: entered promiscuous mode [ 55.554237][ T5943] Bluetooth: hci1: command tx timeout [ 55.556373][ T6128] wg2: entered allmulticast mode [ 55.560862][ T6122] netlink: 172 bytes leftover after parsing attributes in process `syz.0.32'. [ 55.690625][ T6140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.37'. [ 55.766490][ T6147] random: crng reseeded on system resumption [ 56.504768][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 56.504778][ T40] audit: type=1400 audit(1751339599.654:212): avc: denied { create } for pid=6152 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.512753][ T40] audit: type=1400 audit(1751339599.654:213): avc: denied { setopt } for pid=6152 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.520213][ T40] audit: type=1400 audit(1751339599.664:214): avc: denied { map } for pid=6152 comm="syz.2.44" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.796843][ T40] audit: type=1400 audit(1751339599.944:215): avc: denied { read } for pid=6158 comm="syz.1.46" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.805726][ T40] audit: type=1400 audit(1751339599.944:216): avc: denied { open } for pid=6158 comm="syz.1.46" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.814882][ T40] audit: type=1400 audit(1751339599.944:217): avc: denied { read write } for pid=6158 comm="syz.1.46" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.824659][ T40] audit: type=1400 audit(1751339599.944:218): avc: denied { open } for pid=6158 comm="syz.1.46" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.832442][ T40] audit: type=1400 audit(1751339599.944:219): avc: denied { ioctl } for pid=6158 comm="syz.1.46" path="/dev/usbmon2" dev="devtmpfs" ino=743 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.843029][ T40] audit: type=1400 audit(1751339599.944:220): avc: denied { ioctl } for pid=6158 comm="syz.1.46" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.107765][ T40] audit: type=1400 audit(1751339600.254:221): avc: denied { create } for pid=6167 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.378882][ T6175] binder_alloc: 6174: pid 6174 spamming oneway? 1 buffers allocated for a total size of 4096 [ 57.382624][ T6175] binder_alloc: 6174: pid 6174 spamming oneway? 2 buffers allocated for a total size of 5120 [ 57.390011][ T6175] Bluetooth: (null): Invalid header checksum [ 57.459406][ T5943] Bluetooth: Unexpected continuation frame (len 97) [ 57.523539][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.554243][ T5943] Bluetooth: hci2: command tx timeout [ 57.564112][ T5943] Bluetooth: hci0: command tx timeout [ 57.633489][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 57.633905][ T5294] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.683496][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 57.689094][ T9] usb 6-1: config 0 has no interfaces? [ 57.691447][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 57.695254][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.701436][ T9] usb 6-1: config 0 descriptor?? [ 57.803525][ T5940] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 57.803602][ T5294] Bluetooth: hci5: command 0x1003 tx timeout [ 58.225750][ T6166] usb 6-1: USB disconnect, device number 2 [ 58.379530][ T6186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.382219][ T6186] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.388783][ T6186] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.393500][ T6186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.395623][ T6186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.399986][ T6186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.403723][ T6186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.406193][ T6186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.410170][ T6186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.414911][ T6186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.417509][ T6186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.420892][ T6186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.464313][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 58.641639][ T6214] ip6t_rpfilter: unknown options [ 58.804408][ T6225] binder_alloc: 6224: binder_alloc_buf, no vma [ 58.978290][ T6245] xt_hashlimit: size too large, truncated to 1048576 [ 59.082157][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.128677][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.133212][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 59.288458][ T6277] netlink: 'syz.2.84': attribute type 5 has an invalid length. [ 59.295188][ T6277] ip6erspan0: entered promiscuous mode [ 59.311721][ T6282] netlink: 'syz.2.84': attribute type 5 has an invalid length. [ 59.399183][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 59.424941][ T6287] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.86'. [ 59.474006][ T6289] bond1: entered promiscuous mode [ 59.476182][ T6289] bond1: entered allmulticast mode [ 59.479606][ T6289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.643471][ T5294] Bluetooth: hci1: command 0x0419 tx timeout [ 59.654191][ T6313] netlink: 76 bytes leftover after parsing attributes in process `syz.3.90'. [ 59.686596][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 60.056861][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.97'. [ 60.093023][ T6338] syz.2.101: attempt to access beyond end of device [ 60.093023][ T6338] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 60.097538][ T6338] XFS (nbd2): SB validate failed with error -5. [ 60.260904][ T6363] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 60.402679][ T5294] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 60.402717][ T5294] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 60.443497][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.443643][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.443719][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.446750][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.456891][ T5943] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 60.492210][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.723632][ T34] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 60.727590][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 60.863516][ T34] usb 7-1: device descriptor read/64, error -71 [ 61.087692][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 61.113512][ T34] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 61.208566][ T6431] Zero length message leads to an empty skb [ 61.243503][ T34] usb 7-1: device descriptor read/64, error -71 [ 61.356549][ T34] usb usb7-port1: attempt power cycle [ 61.693582][ T34] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 61.713939][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.717914][ T34] usb 7-1: device descriptor read/8, error -71 [ 61.725503][ T5940] Bluetooth: hci1: command 0x0419 tx timeout [ 61.855228][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 61.855243][ T40] audit: type=1400 audit(2000000002.819:300): avc: denied { read write } for pid=6453 comm="syz.0.131" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.868950][ T40] audit: type=1400 audit(2000000002.819:301): avc: denied { open } for pid=6453 comm="syz.0.131" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.879468][ T40] audit: type=1400 audit(2000000002.819:302): avc: denied { bind } for pid=6453 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.889109][ T40] audit: type=1400 audit(2000000002.819:303): avc: denied { listen } for pid=6453 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.897719][ T40] audit: type=1400 audit(2000000002.819:304): avc: denied { connect } for pid=6453 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.904895][ T40] audit: type=1400 audit(2000000002.829:305): avc: denied { accept } for pid=6453 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.963702][ T34] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 61.977027][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 61.994670][ T34] usb 7-1: device descriptor read/8, error -71 [ 62.104112][ T34] usb usb7-port1: unable to enumerate USB device [ 62.156672][ T40] audit: type=1400 audit(2000000003.119:306): avc: denied { append } for pid=6458 comm="syz.3.133" name="nbd3" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.242268][ T40] audit: type=1400 audit(2000000003.199:307): avc: denied { search } for pid=5646 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.249404][ T40] audit: type=1400 audit(2000000003.199:308): avc: denied { search } for pid=5646 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.256007][ T40] audit: type=1400 audit(2000000003.199:309): avc: denied { search } for pid=5646 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.368320][ T6471] netlink: 165 bytes leftover after parsing attributes in process `syz.0.136'. [ 62.421747][ T5940] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 62.424209][ T6477] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 62.516918][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.523619][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.606555][ T6491] kvm: pic: single mode not supported [ 62.607197][ T6491] kvm: pic: single mode not supported [ 62.614518][ T6491] kvm: pic: single mode not supported [ 62.616917][ T6491] kvm: pic: level sensitive irq not supported [ 62.619306][ T6491] kvm: pic: non byte read [ 62.623271][ T6491] kvm: pic: non byte read [ 62.828183][ T6494] geneve2: entered promiscuous mode [ 62.829913][ T6494] geneve2: entered allmulticast mode [ 63.022252][ T6511] loop8: detected capacity change from 0 to 8 [ 63.028240][ T5935] Dev loop8: unable to read RDB block 8 [ 63.030622][ T5935] loop8: unable to read partition table [ 63.033151][ T5935] loop8: partition table beyond EOD, truncated [ 63.038874][ T6511] Dev loop8: unable to read RDB block 8 [ 63.040637][ T6511] loop8: unable to read partition table [ 63.042462][ T6511] loop8: partition table beyond EOD, truncated [ 63.044719][ T6511] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 63.254248][ T6527] kvm: pic: single mode not supported [ 63.254876][ T6527] kvm: pic: single mode not supported [ 63.407014][ T6534] netlink: 172 bytes leftover after parsing attributes in process `syz.1.151'. [ 63.412450][ T6534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6534 comm=syz.1.151 [ 63.413562][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.417978][ T6534] SELinux: syz.1.151 (6534) set checkreqprot to 1. This is no longer supported. [ 63.546199][ T6545] loop8: detected capacity change from 0 to 8 [ 63.549692][ T5935] Dev loop8: unable to read RDB block 8 [ 63.551783][ T5935] loop8: unable to read partition table [ 63.554556][ T5935] loop8: partition table beyond EOD, truncated [ 63.558870][ T6545] Dev loop8: unable to read RDB block 8 [ 63.565196][ T6545] loop8: unable to read partition table [ 63.567533][ T6545] loop8: partition table beyond EOD, truncated [ 63.572135][ T6545] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 63.580638][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.588361][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.592505][ T54] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.597274][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.602540][ T54] usb 5-1: config 0 descriptor?? [ 63.726875][ T6562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6562 comm=syz.1.158 [ 63.793682][ T5940] Bluetooth: hci1: command 0x0419 tx timeout [ 63.826570][ T6565] kvm: pic: single mode not supported [ 63.827196][ T6565] kvm: pic: single mode not supported [ 63.866092][ T6581] loop8: detected capacity change from 0 to 8 [ 63.872446][ T6581] Dev loop8: unable to read RDB block 8 [ 63.875928][ T6581] loop8: unable to read partition table [ 63.877989][ T6581] loop8: partition table beyond EOD, truncated [ 63.880034][ T6581] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 64.005846][ T6601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6601 comm=syz.3.169 [ 64.026974][ T54] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 64.116697][ T6617] loop8: detected capacity change from 0 to 8 [ 64.120669][ T6617] Dev loop8: unable to read RDB block 8 [ 64.122477][ T6617] loop8: unable to read partition table [ 64.129669][ T6617] loop8: partition table beyond EOD, truncated [ 64.132461][ T6617] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 64.138125][ T6615] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 64.214252][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 64.221387][ T6623] kvm: pic: single mode not supported [ 64.222287][ T6623] kvm: pic: single mode not supported [ 64.229804][ T6623] kvm: pic: non byte read [ 64.235413][ T6623] kvm: pic: non byte read [ 64.302182][ T6633] loop2: detected capacity change from 0 to 7 [ 64.307503][ T6633] Dev loop2: unable to read RDB block 7 [ 64.309622][ T6633] loop2: AHDI p1 p2 p3 [ 64.311334][ T6633] loop2: partition table partially beyond EOD, truncated [ 64.317914][ T6633] loop2: p1 start 1601398130 is beyond EOD, truncated [ 64.320761][ T6633] loop2: p2 start 1702059890 is beyond EOD, truncated [ 64.323011][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.330062][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.341996][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.365748][ T6639] process 'syz.3.182' launched './file1' with NULL argv: empty string added [ 64.372965][ T6639] Can't find a SQUASHFS superblock on nullb0 [ 64.386848][ T6644] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 64.408774][ T6644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.430317][ T6644] bond3: (slave gretap1): making interface the new active one [ 64.433059][ T6647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 64.433679][ T6644] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 64.435994][ T6647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.444466][ T6647] vhci_hcd vhci_hcd.0: Device attached [ 64.492583][ T6644] bond3 (unregistering): (slave gretap1): Releasing active interface [ 64.499426][ T6644] bond3 (unregistering): Released all slaves [ 64.514736][ T6648] vhci_hcd: connection closed [ 64.519517][ T61] vhci_hcd: stop threads [ 64.522688][ T61] vhci_hcd: release socket [ 64.524401][ T61] vhci_hcd: disconnect device [ 64.531575][ T6635] infiniband syz2: set active [ 64.534708][ T6635] infiniband syz2: added xfrm0 [ 64.564790][ T6635] RDS/IB: syz2: added [ 64.566329][ T6635] smc: adding ib device syz2 with port count 1 [ 64.569145][ T6635] smc: ib device syz2 port 1 has pnetid [ 64.571793][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 64.576561][ T836] xfrm0 speed is unknown, defaulting to 1000 [ 64.581079][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.604568][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.604589][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.614250][ T6654] __nla_validate_parse: 2 callbacks suppressed [ 64.614262][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.185'. [ 64.759726][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.840925][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 64.966693][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 65.042857][ T6635] xfrm0 speed is unknown, defaulting to 1000 [ 65.119411][ T6667] macvlan2: entered promiscuous mode [ 65.121423][ T6667] macvlan2: entered allmulticast mode [ 65.123473][ T6667] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 65.167915][ T6669] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 65.167930][ T6668] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 65.167950][ T6668] overlayfs: missing 'lowerdir' [ 65.176627][ T6669] overlayfs: missing 'lowerdir' [ 65.200348][ T6671] kvm: pic: single mode not supported [ 65.205862][ T6671] kvm: pic: non byte read [ 65.209388][ T6671] kvm: pic: non byte read [ 65.232486][ T6675] loop2: detected capacity change from 0 to 7 [ 65.236722][ T5935] Dev loop2: unable to read RDB block 7 [ 65.238510][ T5935] loop2: AHDI p1 p2 p3 [ 65.239911][ T5935] loop2: partition table partially beyond EOD, truncated [ 65.242469][ T5935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 65.245992][ T5935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 65.258127][ T6675] Dev loop2: unable to read RDB block 7 [ 65.259318][ T6677] block nbd1: NBD_DISCONNECT [ 65.259964][ T6675] loop2: AHDI p1 p2 p3 [ 65.261590][ T6678] block nbd1: NBD_DISCONNECT [ 65.262914][ T6675] loop2: partition table partially beyond EOD, truncated [ 65.267335][ T6675] loop2: p1 start 1601398130 is beyond EOD, truncated [ 65.269514][ T6675] loop2: p2 start 1702059890 is beyond EOD, truncated [ 65.279517][ T6678] blktrace: Concurrent blktraces are not allowed on nbd1 [ 65.443651][ T6692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.478184][ T6695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6695 comm=syz.3.195 [ 65.482953][ T6695] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 65.501184][ T6695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.525223][ T6695] bond2: (slave veth3): Enslaving as an active interface with a down link [ 65.574484][ T6708] loop8: detected capacity change from 0 to 8 [ 65.576952][ T6708] Dev loop8: unable to read RDB block 8 [ 65.578721][ T6708] loop8: unable to read partition table [ 65.580963][ T6708] loop8: partition table beyond EOD, truncated [ 65.583350][ T6708] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 65.612231][ T6706] xfrm0 speed is unknown, defaulting to 1000 [ 65.735865][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.775039][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.785188][ T6720] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 65.796074][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.798272][ T6725] syz.3.203 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.873473][ T5943] Bluetooth: hci1: command 0x0419 tx timeout [ 66.017918][ T6738] loop8: detected capacity change from 0 to 8 [ 66.021980][ T6738] Dev loop8: unable to read RDB block 8 [ 66.025889][ T6738] loop8: unable to read partition table [ 66.027761][ T6738] loop8: partition table beyond EOD, truncated [ 66.031312][ T6738] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 66.070585][ T6740] ======================================================= [ 66.070585][ T6740] WARNING: The mand mount option has been deprecated and [ 66.070585][ T6740] and is ignored by this kernel. Remove the mand [ 66.070585][ T6740] option from the mount to silence this warning. [ 66.070585][ T6740] ======================================================= [ 66.087041][ T6742] syz.2.210: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 66.092434][ T6742] CPU: 2 UID: 0 PID: 6742 Comm: syz.2.210 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 66.092449][ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.092456][ T6742] Call Trace: [ 66.092459][ T6742] [ 66.092464][ T6742] dump_stack_lvl+0x16c/0x1f0 [ 66.092482][ T6742] warn_alloc+0x248/0x3a0 [ 66.092497][ T6742] ? __pfx_warn_alloc+0x10/0x10 [ 66.092509][ T6742] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.092523][ T6742] ? stack_depot_save_flags+0x3e0/0xa40 [ 66.092540][ T6742] ? kasan_save_stack+0x42/0x60 [ 66.092552][ T6742] ? kasan_save_stack+0x33/0x60 [ 66.092564][ T6742] ? kasan_save_track+0x14/0x30 [ 66.092576][ T6742] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 66.092586][ T6742] ? __vb2_queue_alloc+0x8c9/0x1280 [ 66.092600][ T6742] ? vb2_core_create_bufs+0x559/0xab0 [ 66.092616][ T6742] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 66.092626][ T6742] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 66.092642][ T6742] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 66.092654][ T6742] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 66.092670][ T6742] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 66.092679][ T6742] vmalloc_user_noprof+0x9e/0xe0 [ 66.092689][ T6742] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 66.092699][ T6742] vb2_vmalloc_alloc+0x135/0x3f0 [ 66.092709][ T6742] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 66.092719][ T6742] __vb2_queue_alloc+0x8c9/0x1280 [ 66.092741][ T6742] vb2_core_create_bufs+0x559/0xab0 [ 66.092759][ T6742] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 66.092775][ T6742] ? __pfx___mutex_trylock_common+0x10/0x10 [ 66.092793][ T6742] ? __pfx___might_resched+0x10/0x10 [ 66.092807][ T6742] ? rcu_is_watching+0x12/0xc0 [ 66.092822][ T6742] vb2_create_bufs+0x5e8/0x840 [ 66.092839][ T6742] ? __pfx_vb2_create_bufs+0x10/0x10 [ 66.092854][ T6742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.092866][ T6742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.092879][ T6742] v4l_create_bufs+0x159/0x270 [ 66.092892][ T6742] __video_do_ioctl+0xb3d/0xfc0 [ 66.092906][ T6742] ? __might_fault+0xe3/0x190 [ 66.092919][ T6742] ? __pfx___video_do_ioctl+0x10/0x10 [ 66.092936][ T6742] video_usercopy+0x4cd/0x1720 [ 66.092950][ T6742] ? __pfx___video_do_ioctl+0x10/0x10 [ 66.092961][ T6742] ? selinux_kernel_read_file+0x130/0x130 [ 66.092976][ T6742] ? __pfx_video_usercopy+0x10/0x10 [ 66.092997][ T6742] v4l2_ioctl+0x1ba/0x250 [ 66.093009][ T6742] ? __pfx_v4l2_ioctl+0x10/0x10 [ 66.093021][ T6742] __x64_sys_ioctl+0x18b/0x210 [ 66.093034][ T6742] do_syscall_64+0xcd/0x4c0 [ 66.093050][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.093061][ T6742] RIP: 0033:0x7f69c498e929 [ 66.093070][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.093080][ T6742] RSP: 002b:00007f69c573f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.093090][ T6742] RAX: ffffffffffffffda RBX: 00007f69c4bb5fa0 RCX: 00007f69c498e929 [ 66.093096][ T6742] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000005 [ 66.093102][ T6742] RBP: 00007f69c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.093107][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.093113][ T6742] R13: 0000000000000000 R14: 00007f69c4bb5fa0 R15: 00007ffe73af00f8 [ 66.093125][ T6742] [ 66.093129][ T6742] Mem-Info: [ 66.131202][ T6740] [U] v3f"S/4:XTzWtlW= [ 66.131878][ T6742] active_anon:8286 inactive_anon:0 isolated_anon:0 [ 66.131878][ T6742] active_file:669 inactive_file:50821 isolated_file:0 [ 66.131878][ T6742] unevictable:1768 dirty:1787 writeback:0 [ 66.131878][ T6742] slab_reclaimable:11578 slab_unreclaimable:71370 [ 66.131878][ T6742] mapped:24674 shmem:2400 pagetables:1106 [ 66.131878][ T6742] sec_pagetables:301 bounce:0 [ 66.131878][ T6742] kernel_misc_reclaimable:0 [ 66.131878][ T6742] free:440438 free_pcp:20568 free_cma:0 [ 66.133661][ T6740] [U] J"e:" [ 66.219810][ T6742] Node 0 active_anon:33020kB inactive_anon:0kB active_file:2676kB inactive_file:203084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98696kB dirty:7140kB writeback:0kB shmem:6064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:4340kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 66.230197][ T6742] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 66.240287][ T6742] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.249244][ T6742] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 66.251017][ T6742] Node 0 DMA32 free:143976kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33020kB inactive_anon:0kB active_file:2676kB inactive_file:203084kB unevictable:3536kB writepending:7140kB present:2080628kB managed:1264692kB mlocked:0kB bounce:0kB free_pcp:76664kB local_pcp:17612kB free_cma:0kB [ 66.260855][ T6742] lowmem_reserve[]: 0 0 0 0 0 [ 66.262426][ T6742] Node 1 Normal free:1586280kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:32136kB local_pcp:4400kB free_cma:0kB [ 66.271923][ T6742] lowmem_reserve[]: 0 0 0 0 0 [ 66.275450][ T6742] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.279369][ T6742] Node 0 DMA32: 470*4kB (UM) 187*8kB (UME) 176*16kB (UM) 66*32kB (UM) 58*64kB (UM) 63*128kB (UM) 46*256kB (UM) 49*512kB (UME) 38*1024kB (UM) 7*2048kB (UM) 10*4096kB (UM) = 151152kB [ 66.284928][ T6742] Node 1 Normal: 0*4kB 8*8kB (UME) 10*16kB (UME) 17*32kB (UME) 11*64kB (ME) 5*128kB (ME) 2*256kB (UE) 5*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 385*4096kB (M) = 1586240kB [ 66.290124][ T6742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.292919][ T6742] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 66.295827][ T6742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.298780][ T6742] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.301588][ T6742] 53886 total pagecache pages [ 66.303111][ T6742] 0 pages in swap cache [ 66.304492][ T6742] Free swap = 124996kB [ 66.305765][ T6742] Total swap = 124996kB [ 66.307122][ T6742] 1048443 pages RAM [ 66.308462][ T6742] 0 pages HighMem/MovableOnly [ 66.310035][ T6742] 282941 pages reserved [ 66.311325][ T6742] 0 pages cma reserved [ 66.381217][ T6751] overlayfs: failed to verify upper root origin [ 66.430990][ T6758] overlayfs: failed to resolve 'verity=require': -2 [ 66.459213][ T6761] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 66.463138][ T6761] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 67.098238][ T6773] netlink: 'syz.1.219': attribute type 3 has an invalid length. [ 67.100957][ T6773] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 67.103792][ T6773] netlink: 220 bytes leftover after parsing attributes in process `syz.1.219'. [ 67.107043][ T6773] NCSI netlink: No device for ifindex 0 [ 67.171107][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 67.255264][ T6789] xfrm0 speed is unknown, defaulting to 1000 [ 67.299376][ T6792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6792 comm=syz.1.224 [ 67.481868][ T6801] netlink: 25 bytes leftover after parsing attributes in process `syz.1.228'. [ 67.525524][ T6806] xt_socket: unknown flags 0x8 [ 67.528490][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 67.528500][ T40] audit: type=1400 audit(2000000008.489:373): avc: denied { read } for pid=6804 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.701387][ T6817] netlink: 108 bytes leftover after parsing attributes in process `syz.2.233'. [ 67.768382][ T6823] capability: warning: `syz.2.234' uses deprecated v2 capabilities in a way that may be insecure [ 68.207984][ T40] audit: type=1400 audit(2000000009.169:374): avc: denied { write } for pid=6828 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.208087][ T6829] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 68.216895][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 68.398405][ T40] audit: type=1400 audit(2000000009.359:375): avc: denied { mounton } for pid=6840 comm="syz.3.239" path="/73/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 68.408520][ T40] audit: type=1800 audit(2000000009.369:376): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.239" name="/" dev="9p" ino=65538 res=0 errno=0 [ 68.509777][ T6846] loop2: detected capacity change from 0 to 7 [ 68.512125][ T6844] pic_ioport_write: 1 callbacks suppressed [ 68.512135][ T6844] kvm: pic: single mode not supported [ 68.513195][ T6846] Dev loop2: unable to read RDB block 7 [ 68.515567][ T6844] kvm: pic: single mode not supported [ 68.520749][ T6846] loop2: AHDI p1 p2 p3 [ 68.525901][ T6846] loop2: partition table partially beyond EOD, truncated [ 68.528994][ T6846] loop2: p1 start 1601398130 is beyond EOD, truncated [ 68.531815][ T6846] loop2: p2 start 1702059890 is beyond EOD, truncated [ 68.721063][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 68.827287][ T5969] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.838561][ T40] audit: type=1400 audit(2000000009.799:377): avc: denied { create } for pid=6863 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.857605][ T40] audit: type=1400 audit(2000000009.819:378): avc: denied { setopt } for pid=6863 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.864063][ T40] audit: type=1400 audit(2000000009.819:379): avc: denied { connect } for pid=6863 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.974931][ T5969] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.978146][ T5969] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.981662][ T5969] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.989236][ T5969] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.992135][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.995032][ T5969] usb 8-1: Product: syz [ 68.996463][ T5969] usb 8-1: Manufacturer: syz [ 68.998169][ T5969] usb 8-1: SerialNumber: syz [ 69.005972][ T5969] hub 8-1:1.0: bad descriptor, ignoring hub [ 69.008192][ T5969] hub 8-1:1.0: probe with driver hub failed with error -5 [ 69.212089][ T5969] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.460765][ T40] audit: type=1400 audit(2000000010.419:380): avc: denied { create } for pid=6851 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.477364][ T40] audit: type=1400 audit(2000000010.439:381): avc: denied { getopt } for pid=6875 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.804977][ T40] audit: type=1400 audit(2000000010.769:382): avc: denied { connect } for pid=6888 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.756306][ T6921] __nla_validate_parse: 4 callbacks suppressed [ 70.756317][ T6921] netlink: 168 bytes leftover after parsing attributes in process `syz.1.263'. [ 70.808017][ T6920] netlink: 168 bytes leftover after parsing attributes in process `syz.1.263'. [ 71.047867][ T6950] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 71.056907][ T6950] CIFS mount error: No usable UNC path provided in device string! [ 71.056907][ T6950] [ 71.060208][ T6950] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 71.088554][ T6956] kvm: pic: single mode not supported [ 71.089790][ T6956] kvm: pic: single mode not supported [ 71.100901][ T6956] kvm: pic: non byte read [ 71.105170][ T6956] kvm: pic: non byte read [ 71.156787][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.158828][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.159072][ T6962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.981656][ T6967] loop2: detected capacity change from 0 to 7 [ 71.986032][ T5935] Dev loop2: unable to read RDB block 7 [ 71.988120][ T5935] loop2: AHDI p1 p2 p3 [ 71.989944][ T5935] loop2: partition table partially beyond EOD, truncated [ 71.993103][ T5935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 71.996660][ T5935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 72.000796][ T6967] Dev loop2: unable to read RDB block 7 [ 72.003086][ T6967] loop2: AHDI p1 p2 p3 [ 72.004922][ T6967] loop2: partition table partially beyond EOD, truncated [ 72.007851][ T6967] loop2: p1 start 1601398130 is beyond EOD, truncated [ 72.010561][ T6967] loop2: p2 start 1702059890 is beyond EOD, truncated [ 72.171450][ T6979] erofs (device loop1): cannot find valid erofs superblock [ 72.333838][ T6985] kvm: pic: single mode not supported [ 72.334576][ T6985] kvm: pic: single mode not supported [ 72.343145][ T6985] kvm: pic: non byte read [ 72.347867][ T6985] kvm: pic: non byte read [ 72.374208][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.470370][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.566652][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.600097][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.605285][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.608985][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.613158][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.617202][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.638517][ T6990] xfrm0 speed is unknown, defaulting to 1000 [ 72.678431][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.911716][ T12] bridge_slave_1: left allmulticast mode [ 72.914836][ T12] bridge_slave_1: left promiscuous mode [ 72.918211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.925823][ T12] bridge_slave_0: left allmulticast mode [ 72.927701][ T12] bridge_slave_0: left promiscuous mode [ 72.929589][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.178453][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.185420][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.190422][ T12] bond0 (unregistering): Released all slaves [ 73.261002][ T12] bond1 (unregistering): Released all slaves [ 73.271235][ T12] bond2 (unregistering): Released all slaves [ 73.292298][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 73.314110][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 73.422122][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.425293][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.428332][ T6990] bridge_slave_0: entered allmulticast mode [ 73.432227][ T6990] bridge_slave_0: entered promiscuous mode [ 73.436962][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439909][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.442785][ T6990] bridge_slave_1: entered allmulticast mode [ 73.446648][ T6990] bridge_slave_1: entered promiscuous mode [ 73.467351][ T7003] capability: warning: `syz.1.285' uses 32-bit capabilities (legacy support in use) [ 73.511783][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.525106][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.586622][ T6990] team0: Port device team_slave_0 added [ 73.614338][ T6990] team0: Port device team_slave_1 added [ 73.644080][ T7012] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 73.665923][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.668982][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.680467][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.691667][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.697789][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.706504][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.733744][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 73.837053][ T6990] hsr_slave_0: entered promiscuous mode [ 73.840638][ T6990] hsr_slave_1: entered promiscuous mode [ 73.843793][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.846903][ T6990] Cannot create hsr debugfs directory [ 73.976135][ T12] hsr_slave_0: left promiscuous mode [ 73.978512][ T12] hsr_slave_1: left promiscuous mode [ 73.980603][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.984752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.006738][ T12] veth1_macvtap: left promiscuous mode [ 74.008705][ T12] veth0_macvtap: left promiscuous mode [ 74.010483][ T12] veth1_vlan: left promiscuous mode [ 74.012231][ T12] veth0_vlan: left promiscuous mode [ 74.357234][ T6628] plantronics 0003:047F:FFFF.0002: timeout initializing reports [ 74.386251][ T9] usb 5-1: USB disconnect, device number 2 [ 74.421843][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 74.421857][ T40] audit: type=1400 audit(2000000015.379:389): avc: denied { write } for pid=7031 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.436485][ T40] audit: type=1326 audit(2000000015.379:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.450417][ T40] audit: type=1326 audit(2000000015.379:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.460517][ T40] audit: type=1326 audit(2000000015.379:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.469917][ T40] audit: type=1326 audit(2000000015.379:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.480345][ T40] audit: type=1326 audit(2000000015.379:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.489428][ T40] audit: type=1326 audit(2000000015.379:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.492596][ T7038] loop2: detected capacity change from 0 to 7 [ 74.496574][ T40] audit: type=1326 audit(2000000015.379:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.496598][ T40] audit: type=1326 audit(2000000015.379:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.500975][ T7038] Dev loop2: unable to read RDB block 7 [ 74.508136][ T6023] usb 8-1: USB disconnect, device number 2 [ 74.509488][ T40] audit: type=1326 audit(2000000015.379:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d78e929 code=0x50000 [ 74.516848][ T7038] loop2: AHDI p1 p2 p3 [ 74.526117][ T6023] usblp1: removed [ 74.530569][ T7038] loop2: partition table partially beyond EOD, truncated [ 74.538734][ T7038] loop2: p1 start 1601398130 is beyond EOD, truncated [ 74.541286][ T7038] loop2: p2 start 1702059890 is beyond EOD, truncated [ 74.588872][ T7042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.592757][ T7042] IPv6: NLM_F_CREATE should be set when creating new route [ 74.595132][ T7042] IPv6: NLM_F_CREATE should be set when creating new route [ 74.597413][ T7042] IPv6: NLM_F_CREATE should be set when creating new route [ 74.600698][ T7040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.676280][ T5943] Bluetooth: hci3: command tx timeout [ 74.682854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.797883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.486168][ T6990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.490521][ T6990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.495436][ T6990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.499499][ T6990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.559259][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.573122][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.586142][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.588462][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.597580][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.599844][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.640921][ T6990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.646761][ T6990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.847077][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.868444][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.938175][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.008473][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.012256][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.015350][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.018415][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.021670][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.024446][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.046691][ T7081] xfrm0 speed is unknown, defaulting to 1000 [ 76.059513][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.063083][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.066780][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.070650][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.073457][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.135308][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.152456][ T6990] veth0_vlan: entered promiscuous mode [ 76.166937][ T6990] veth1_vlan: entered promiscuous mode [ 76.189265][ T6990] veth0_macvtap: entered promiscuous mode [ 76.193140][ T6990] veth1_macvtap: entered promiscuous mode [ 76.204813][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.212863][ T7086] xfrm0 speed is unknown, defaulting to 1000 [ 76.237878][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.283199][ T6990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.287022][ T6990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289761][ T6990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.292594][ T6990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.458908][ T12] bridge_slave_1: left allmulticast mode [ 76.460827][ T12] bridge_slave_1: left promiscuous mode [ 76.462656][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.469355][ T12] bridge_slave_0: left allmulticast mode [ 76.471794][ T12] bridge_slave_0: left promiscuous mode [ 76.474461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.576575][ T13] smc: removing ib device syz2 [ 76.753494][ T5943] Bluetooth: hci3: command tx timeout [ 76.887228][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.891613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.900302][ T12] bond0 (unregistering): Released all slaves [ 76.948113][ T836] xfrm0 speed is unknown, defaulting to 1000 [ 76.950066][ T836] syz2: Port: 1 Link DOWN [ 77.026957][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 77.079039][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.081498][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.173141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.183906][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.307681][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.310415][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.313303][ T7081] bridge_slave_0: entered allmulticast mode [ 77.320379][ T7081] bridge_slave_0: entered promiscuous mode [ 77.324957][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.327851][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.330765][ T7081] bridge_slave_1: entered allmulticast mode [ 77.336529][ T7081] bridge_slave_1: entered promiscuous mode [ 77.408861][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.426676][ T7114] loop8: detected capacity change from 0 to 8 [ 77.432342][ T7114] Dev loop8: unable to read RDB block 8 [ 77.434848][ T7114] loop8: unable to read partition table [ 77.436881][ T7114] loop8: partition table beyond EOD, truncated [ 77.438791][ T7114] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 77.458945][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.500284][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 77.540582][ T7081] team0: Port device team_slave_0 added [ 77.574793][ T7081] team0: Port device team_slave_1 added [ 77.582422][ T7122] kvm: pic: single mode not supported [ 77.583063][ T7122] kvm: pic: single mode not supported [ 77.591253][ T7122] kvm: pic: non byte read [ 77.595290][ T7122] kvm: pic: non byte read [ 77.632419][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.636436][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.645138][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.667127][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.669583][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.678674][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.687620][ T12] hsr_slave_0: left promiscuous mode [ 77.690126][ T12] hsr_slave_1: left promiscuous mode [ 77.692108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.693513][ T836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.695351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.701990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.705055][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.732654][ T12] veth1_macvtap: left promiscuous mode [ 77.735327][ T12] veth0_macvtap: left promiscuous mode [ 77.737733][ T12] veth1_vlan: left promiscuous mode [ 77.741065][ T12] veth0_vlan: left promiscuous mode [ 77.865594][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 77.869765][ T836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.874884][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.878988][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.883165][ T836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.890126][ T836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.894773][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.035921][ T5943] Bluetooth: hci0: command tx timeout [ 78.102945][ T836] usb 5-1: GET_CAPABILITIES returned 0 [ 78.104917][ T836] usbtmc 5-1:16.0: can't read capabilities [ 78.123758][ T5943] Bluetooth: hci1: command tx timeout [ 78.133468][ T836] usb 5-1: USB disconnect, device number 3 [ 78.370420][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.440181][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.655347][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 78.658318][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 78.680796][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 78.683774][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 78.700922][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 78.703849][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 78.719751][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 78.722556][ T7144] kvm: kvm [7143]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 78.833490][ T5940] Bluetooth: hci3: command tx timeout [ 78.964129][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.966562][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.970591][ T7086] bridge_slave_0: entered allmulticast mode [ 78.977761][ T7086] bridge_slave_0: entered promiscuous mode [ 78.985499][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.988393][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.991332][ T7086] bridge_slave_1: entered allmulticast mode [ 79.013629][ T7086] bridge_slave_1: entered promiscuous mode [ 79.040076][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.046559][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 79.112899][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.120517][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.159371][ T7081] hsr_slave_0: entered promiscuous mode [ 79.162458][ T7081] hsr_slave_1: entered promiscuous mode [ 79.165644][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.168805][ T7081] Cannot create hsr debugfs directory [ 79.208305][ T7086] team0: Port device team_slave_0 added [ 79.261609][ T7086] team0: Port device team_slave_1 added [ 79.392858][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.395538][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.405333][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.410554][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.412858][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.426069][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.680951][ T7159] loop8: detected capacity change from 0 to 8 [ 79.685312][ T5935] Dev loop8: unable to read RDB block 8 [ 79.687168][ T5935] loop8: unable to read partition table [ 79.688857][ T7156] netlink: 'syz.4.313': attribute type 25 has an invalid length. [ 79.689042][ T5935] loop8: partition table beyond EOD, truncated [ 79.694847][ T7157] netlink: 'syz.4.313': attribute type 25 has an invalid length. [ 79.699281][ T7159] Dev loop8: unable to read RDB block 8 [ 79.700904][ T7159] loop8: unable to read partition table [ 79.702537][ T7159] loop8: partition table beyond EOD, truncated [ 79.712995][ T7159] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 79.771859][ T40] kauditd_printk_skb: 24497 callbacks suppressed [ 79.771868][ T40] audit: type=1400 audit(2000000020.729:24896): avc: denied { write } for pid=7166 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.784273][ T40] audit: type=1400 audit(2000000020.739:24897): avc: denied { read } for pid=7166 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.790487][ T7086] hsr_slave_0: entered promiscuous mode [ 79.796390][ T7086] hsr_slave_1: entered promiscuous mode [ 79.799265][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.802328][ T7086] Cannot create hsr debugfs directory [ 79.813516][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 79.825231][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 79.879786][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 79.925783][ T7169] warning: `syz.4.317' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.001877][ T7167] infiniband syz2: set active [ 80.003844][ T7167] infiniband syz2: added vxcan1 [ 80.016456][ T7171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7171 comm=syz.4.318 [ 80.022464][ T40] audit: type=1400 audit(2000000020.979:24898): avc: denied { read } for pid=7170 comm="syz.4.318" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.025138][ T7167] RDS/IB: syz2: added [ 80.031272][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.032484][ T40] audit: type=1400 audit(2000000020.979:24899): avc: denied { ioctl } for pid=7170 comm="syz.4.318" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.034997][ T7167] smc: adding ib device syz2 with port count 1 [ 80.046265][ T55] vxcan1 speed is unknown, defaulting to 1000 [ 80.048170][ T7167] smc: ib device syz2 port 1 has pnetid [ 80.050686][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.050969][ T55] vxcan1 speed is unknown, defaulting to 1000 [ 80.063921][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 80.065569][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.076015][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.114542][ T5940] Bluetooth: hci0: command tx timeout [ 80.140125][ T7086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.147030][ T7086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.159676][ T7086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.171437][ T7086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.194231][ T5940] Bluetooth: hci1: command tx timeout [ 80.210635][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 80.251760][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.280584][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.292290][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.295345][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.303314][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.306403][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.308570][ T7174] kvm: kvm [7173]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 80.312755][ T7174] kvm: kvm [7173]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 80.324991][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.362701][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 80.367053][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.387062][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.389474][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.394575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.397131][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.540237][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.547277][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 80.646042][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.704124][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 80.752576][ T7081] veth0_vlan: entered promiscuous mode [ 80.769410][ T7081] veth1_vlan: entered promiscuous mode [ 80.788310][ T7081] veth0_macvtap: entered promiscuous mode [ 80.792421][ T7081] veth1_macvtap: entered promiscuous mode [ 80.802857][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.812997][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.824455][ T7081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.827875][ T7081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.831232][ T7081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.843497][ T7081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.915506][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.922486][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.954312][ T7086] veth0_vlan: entered promiscuous mode [ 80.968982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.971950][ T7086] veth1_vlan: entered promiscuous mode [ 80.972436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.004392][ T7086] veth0_macvtap: entered promiscuous mode [ 81.011696][ T7086] veth1_macvtap: entered promiscuous mode [ 81.026121][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.032586][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.047253][ T7086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.049711][ T7231] loop2: detected capacity change from 0 to 7 [ 81.050546][ T7086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.054605][ T7231] Dev loop2: unable to read RDB block 7 [ 81.057907][ T7086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.058702][ T7231] loop2: AHDI p1 p2 p3 [ 81.063449][ T7086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.069401][ T7231] loop2: partition table partially beyond EOD, truncated [ 81.072457][ T7231] loop2: p1 start 1601398130 is beyond EOD, truncated [ 81.076691][ T7231] loop2: p2 start 1702059890 is beyond EOD, truncated [ 81.101422][ T7234] xt_policy: output policy not valid in PREROUTING and INPUT [ 81.163198][ T7239] loop8: detected capacity change from 0 to 8 [ 81.164275][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.175887][ T7239] Dev loop8: unable to read RDB block 8 [ 81.176141][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.177649][ T7239] loop8: unable to read partition table [ 81.181035][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.182665][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.191096][ T7239] loop8: partition table beyond EOD, truncated [ 81.194928][ T7239] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 81.298038][ T40] audit: type=1400 audit(2000000022.259:24900): avc: denied { write } for pid=7236 comm="syz.0.322" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.319243][ T40] audit: type=1400 audit(2000000022.259:24901): avc: denied { open } for pid=7236 comm="syz.0.322" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.332394][ T40] audit: type=1400 audit(2000000022.259:24902): avc: denied { ioctl } for pid=7236 comm="syz.0.322" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.347128][ T40] audit: type=1400 audit(2000000022.259:24903): avc: denied { setopt } for pid=7236 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.377484][ T7266] block nbd6: not configured, cannot reconfigure [ 81.414750][ T53] cfg80211: failed to load regulatory.db [ 81.465686][ T7271] loop2: detected capacity change from 0 to 7 [ 81.470697][ T7271] Dev loop2: unable to read RDB block 7 [ 81.479462][ T7274] overlayfs: failed to resolve './file1': -2 [ 81.480813][ T7271] loop2: AHDI p1 p2 p3 [ 81.484274][ T7271] loop2: partition table partially beyond EOD, truncated [ 81.488034][ T7271] loop2: p1 start 1601398130 is beyond EOD, truncated [ 81.490995][ T7271] loop2: p2 start 1702059890 is beyond EOD, truncated [ 81.545836][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.335'. [ 81.559352][ T7282] netlink: 'syz.5.334': attribute type 11 has an invalid length. [ 81.560592][ T7280] vlan2: entered allmulticast mode [ 81.561790][ T7282] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.334'. [ 81.563717][ T7280] veth1: entered allmulticast mode [ 81.581687][ T7283] netlink: 'syz.5.334': attribute type 11 has an invalid length. [ 81.584672][ T7283] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.334'. [ 81.622383][ T40] audit: type=1400 audit(2000000022.579:24904): avc: denied { read } for pid=7285 comm="syz.0.333" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.683745][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 81.686545][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 81.717525][ T7302] Cannot find map_set index 0 as target [ 81.776598][ T7310] veth0_to_bond: entered allmulticast mode [ 81.822370][ T7316] overlayfs: failed to resolve './file1': -2 [ 81.866774][ T7322] Bluetooth: MGMT ver 1.23 [ 81.867298][ T7319] loop2: detected capacity change from 0 to 7 [ 81.869093][ T40] audit: type=1400 audit(2000000022.829:24905): avc: denied { ioctl } for pid=7321 comm="syz.5.345" path="socket:[15307]" dev="sockfs" ino=15307 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.881242][ T7319] Dev loop2: unable to read RDB block 7 [ 81.883042][ T7319] loop2: AHDI p1 p2 p3 [ 81.891199][ T7319] loop2: partition table partially beyond EOD, truncated [ 81.900925][ T7319] loop2: p1 start 1601398130 is beyond EOD, truncated [ 81.903001][ T7319] loop2: p2 start 1702059890 is beyond EOD, truncated [ 81.911853][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.922484][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.950149][ T7331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.347'. [ 82.123767][ T5997] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 82.204357][ T5940] Bluetooth: hci0: command tx timeout [ 82.263592][ T5997] usb 11-1: device descriptor read/64, error -71 [ 82.283784][ T5940] Bluetooth: hci1: command tx timeout [ 82.347882][ T7353] kvm: pic: single mode not supported [ 82.348925][ T7353] kvm: pic: single mode not supported [ 82.362231][ T7353] kvm: pic: non byte read [ 82.368343][ T7353] kvm: pic: non byte read [ 82.459761][ T7368] netlink: 'syz.5.354': attribute type 1 has an invalid length. [ 82.513606][ T5997] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 82.554048][ T7376] ntfs3(sr0): Primary boot signature is not NTFS. [ 82.558038][ T7376] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 82.569826][ T7377] ntfs3(sr0): Primary boot signature is not NTFS. [ 82.572519][ T7377] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 82.663791][ T5997] usb 11-1: device descriptor read/64, error -71 [ 82.669588][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 82.783727][ T5997] usb usb11-port1: attempt power cycle [ 82.813310][ T7402] Unsupported ieee802154 address type: 0 [ 83.123601][ T5997] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 83.144085][ T5997] usb 11-1: device descriptor read/8, error -71 [ 83.348549][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.369'. [ 83.385720][ T7450] loop8: detected capacity change from 0 to 8 [ 83.388606][ T5935] Dev loop8: unable to read RDB block 8 [ 83.390418][ T5935] loop8: unable to read partition table [ 83.392293][ T5935] loop8: partition table beyond EOD, truncated [ 83.398982][ T7450] Dev loop8: unable to read RDB block 8 [ 83.401186][ T7450] loop8: unable to read partition table [ 83.403096][ T7450] loop8: partition table beyond EOD, truncated [ 83.405222][ T7450] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 83.413598][ T5997] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 83.457273][ T5997] usb 11-1: device descriptor read/8, error -71 [ 83.573881][ T5997] usb usb11-port1: unable to enumerate USB device [ 83.675028][ T7484] loop8: detected capacity change from 0 to 8 [ 83.677909][ T7484] Dev loop8: unable to read RDB block 8 [ 83.680598][ T7484] loop8: unable to read partition table [ 83.682605][ T7484] loop8: partition table beyond EOD, truncated [ 83.688577][ T7484] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 83.740989][ T7494] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 84.021711][ T7521] loop8: detected capacity change from 0 to 8 [ 84.035173][ T7521] Dev loop8: unable to read RDB block 8 [ 84.036977][ T7521] loop8: unable to read partition table [ 84.038743][ T7521] loop8: partition table beyond EOD, truncated [ 84.040623][ T7521] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 84.152252][ T7527] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 84.179054][ T7527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.202389][ T7527] bond1: (slave batadv1): Opening slave failed [ 84.273564][ T5940] Bluetooth: hci0: command tx timeout [ 84.353746][ T5940] Bluetooth: hci1: command tx timeout [ 84.751477][ T7547] loop2: detected capacity change from 0 to 7 [ 84.755821][ T7547] Dev loop2: unable to read RDB block 7 [ 84.758196][ T7547] loop2: AHDI p1 p2 p3 [ 84.759906][ T7547] loop2: partition table partially beyond EOD, truncated [ 84.763300][ T7547] loop2: p1 start 1601398130 is beyond EOD, truncated [ 84.766852][ T7547] loop2: p2 start 1702059890 is beyond EOD, truncated [ 84.831911][ T7551] ata1.00: invalid multi_count 128 ignored [ 84.902425][ T7556] __nla_validate_parse: 2 callbacks suppressed [ 84.902439][ T7556] netlink: 196 bytes leftover after parsing attributes in process `syz.4.410'. [ 84.908830][ T7556] netlink: 196 bytes leftover after parsing attributes in process `syz.4.410'. [ 84.912471][ T7556] netlink: 19 bytes leftover after parsing attributes in process `syz.4.410'. [ 84.918888][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 84.918922][ T40] audit: type=1400 audit(2000000025.879:24919): avc: denied { remount } for pid=7555 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.979801][ T40] audit: type=1400 audit(2000000025.939:24920): avc: denied { getopt } for pid=7560 comm="syz.6.412" lport=56010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.002509][ T7564] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.412'. [ 85.007275][ T40] audit: type=1400 audit(2000000025.969:24921): avc: denied { block_suspend } for pid=7560 comm="syz.6.412" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.011510][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.412'. [ 85.156054][ T7580] loop2: detected capacity change from 0 to 7 [ 85.160787][ T7580] Dev loop2: unable to read RDB block 7 [ 85.162622][ T7580] loop2: AHDI p1 p2 p3 [ 85.164900][ T7580] loop2: partition table partially beyond EOD, truncated [ 85.168300][ T7580] loop2: p1 start 1601398130 is beyond EOD, truncated [ 85.170500][ T7580] loop2: p2 start 1702059890 is beyond EOD, truncated [ 85.202704][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 85.384896][ T7591] delete_channel: no stack [ 85.393806][ T40] audit: type=1400 audit(2000000026.349:24922): avc: denied { ioctl } for pid=7591 comm="syz.0.420" path="socket:[19689]" dev="sockfs" ino=19689 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.448089][ T40] audit: type=1400 audit(2000000026.409:24923): avc: denied { ioctl } for pid=7594 comm="syz.5.423" path="socket:[19701]" dev="sockfs" ino=19701 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.458076][ T7596] binder: 7594:7596 ioctl c0306201 200000000640 returned -22 [ 85.460454][ T7596] binder: 7594:7596 ioctl c018937a 200000000080 returned -22 [ 85.514708][ T40] audit: type=1400 audit(2000000026.479:24924): avc: denied { setopt } for pid=7600 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 85.525426][ T7602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.425'. [ 85.544404][ T7602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.425'. [ 85.606677][ T40] audit: type=1400 audit(2000000026.569:24925): avc: denied { watch_mount watch_reads } for pid=7608 comm="syz.0.427" path="/66" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.743473][ T836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.885104][ T836] usb 9-1: device descriptor read/64, error -71 [ 86.013737][ T54] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.089495][ T7615] block nbd0: shutting down sockets [ 86.145295][ T836] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 86.198700][ T7626] loop2: detected capacity change from 0 to 7 [ 86.201366][ T54] usb 10-1: Using ep0 maxpacket: 16 [ 86.205668][ T54] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.210395][ T7626] Dev loop2: unable to read RDB block 7 [ 86.212811][ T54] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.217971][ T7626] loop2: AHDI p1 p2 p3 [ 86.219888][ T7626] loop2: partition table partially beyond EOD, truncated [ 86.223259][ T54] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 86.228852][ T7626] loop2: p1 start 1601398130 is beyond EOD, truncated [ 86.231851][ T7626] loop2: p2 start 1702059890 is beyond EOD, truncated [ 86.236301][ T54] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.241072][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.248079][ T54] usb 10-1: SerialNumber: syz [ 86.264202][ T54] hub 10-1:1.0: bad descriptor, ignoring hub [ 86.266737][ T54] hub 10-1:1.0: probe with driver hub failed with error -5 [ 86.270988][ T54] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 86.324568][ T7633] vxcan1 speed is unknown, defaulting to 1000 [ 86.563670][ T55] usb 10-1: USB disconnect, device number 2 [ 86.640780][ T40] audit: type=1400 audit(2000000027.599:24926): avc: denied { map } for pid=7642 comm="syz.6.438" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.648722][ T40] audit: type=1400 audit(2000000027.599:24927): avc: denied { execute } for pid=7642 comm="syz.6.438" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.736807][ T40] audit: type=1400 audit(2000000027.699:24928): avc: denied { write } for pid=7645 comm="syz.6.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 86.782723][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.440'. [ 86.797675][ T7651] omfs: Invalid superblock (0) [ 86.802970][ T7651] overlayfs: failed to resolve './file2': -2 [ 87.213877][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.412400][ T7674] netlink: 'syz.5.446': attribute type 9 has an invalid length. [ 87.531085][ T7687] overlayfs: workdir and upperdir must reside under the same mount [ 87.553766][ T7686] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 87.555962][ T7686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.573868][ T7686] vhci_hcd vhci_hcd.0: Device attached [ 87.576225][ T5940] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 87.576273][ T5940] Bluetooth: hci0: Dropping invalid advertising data [ 87.581950][ T5940] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 87.581968][ T5940] Bluetooth: hci0: Malformed LE Event: 0x02 [ 87.590415][ T7688] vhci_hcd: connection closed [ 87.591843][ T12] vhci_hcd: stop threads [ 87.595069][ T12] vhci_hcd: release socket [ 87.596765][ T12] vhci_hcd: disconnect device [ 87.960916][ T7718] loop2: detected capacity change from 0 to 7 [ 87.964589][ T7718] Dev loop2: unable to read RDB block 7 [ 87.967019][ T7718] loop2: AHDI p1 p2 p3 [ 87.968826][ T7718] loop2: partition table partially beyond EOD, truncated [ 87.971893][ T7718] loop2: p1 start 1601398130 is beyond EOD, truncated [ 87.975821][ T7718] loop2: p2 start 1702059890 is beyond EOD, truncated [ 88.269581][ T7762] loop2: detected capacity change from 0 to 7 [ 88.275281][ T7762] Dev loop2: unable to read RDB block 7 [ 88.277050][ T7762] loop2: AHDI p1 p2 p3 [ 88.278369][ T7762] loop2: partition table partially beyond EOD, truncated [ 88.280574][ T7762] loop2: p1 start 1601398130 is beyond EOD, truncated [ 88.282675][ T7762] loop2: p2 start 1702059890 is beyond EOD, truncated [ 88.376665][ T7780] tmpfs: Bad value for 'mpol' [ 88.513911][ T55] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.536219][ T7794] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.546464][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.480'. [ 88.546464][ T7798] loop2: detected capacity change from 0 to 7 [ 88.547122][ T7798] Dev loop2: unable to read RDB block 7 [ 88.559025][ T7798] loop2: AHDI p1 p2 p3 [ 88.561238][ T7798] loop2: partition table partially beyond EOD, truncated [ 88.566936][ T7798] loop2: p1 start 1601398130 is beyond EOD, truncated [ 88.569764][ T7798] loop2: p2 start 1702059890 is beyond EOD, truncated [ 88.673583][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 88.687168][ T55] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 88.689894][ T55] usb 5-1: config 0 has no interface number 0 [ 88.694849][ T55] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 88.697825][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.700384][ T55] usb 5-1: Product: syz [ 88.701710][ T55] usb 5-1: Manufacturer: syz [ 88.703310][ T55] usb 5-1: SerialNumber: syz [ 88.710508][ T55] usb 5-1: config 0 descriptor?? [ 88.712234][ T7820] syz.5.489 uses obsolete (PF_INET,SOCK_PACKET) [ 88.714079][ T55] hub 5-1:0.145: bad descriptor, ignoring hub [ 88.717350][ T55] hub 5-1:0.145: probe with driver hub failed with error -5 [ 88.721629][ T55] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.145/input/input5 [ 88.846319][ T7833] 9pnet_virtio: no channels available for device syz [ 88.927546][ T7846] loop2: detected capacity change from 0 to 7 [ 88.930517][ T7846] Dev loop2: unable to read RDB block 7 [ 88.932299][ T7846] loop2: AHDI p1 p2 p3 [ 88.935626][ T7846] loop2: partition table partially beyond EOD, truncated [ 88.937930][ T7846] loop2: p1 start 1601398130 is beyond EOD, truncated [ 88.940146][ T7846] loop2: p2 start 1702059890 is beyond EOD, truncated [ 88.991457][ T7850] kvm: pic: single mode not supported [ 88.992267][ T7850] kvm: pic: single mode not supported [ 89.078155][ T55] usb 5-1: USB disconnect, device number 4 [ 89.116015][ T7862] overlayfs: conflicting lowerdir path [ 89.183146][ T7868] syz.5.503: attempt to access beyond end of device [ 89.183146][ T7868] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 89.188570][ T7868] syz.5.503: attempt to access beyond end of device [ 89.188570][ T7868] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 89.195149][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 89.198510][ T7868] syz.5.503: attempt to access beyond end of device [ 89.198510][ T7868] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 89.202491][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 89.206770][ T7868] syz.5.503: attempt to access beyond end of device [ 89.206770][ T7868] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 89.211059][ T7868] syz.5.503: attempt to access beyond end of device [ 89.211059][ T7868] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 89.232859][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 89.236484][ T7868] syz.5.503: attempt to access beyond end of device [ 89.236484][ T7868] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 89.241407][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 89.244703][ T7868] syz.5.503: attempt to access beyond end of device [ 89.244703][ T7868] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 89.249532][ T7868] syz.5.503: attempt to access beyond end of device [ 89.249532][ T7868] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 89.254754][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 89.258846][ T7868] syz.5.503: attempt to access beyond end of device [ 89.258846][ T7868] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 89.268692][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 89.272984][ T7868] syz.5.503: attempt to access beyond end of device [ 89.272984][ T7868] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 89.279085][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 89.283238][ T7868] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 89.287320][ T7868] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 89.517856][ T7888] kvm: emulating exchange as write [ 89.647378][ T7892] FAULT_INJECTION: forcing a failure. [ 89.647378][ T7892] name failslab, interval 1, probability 0, space 0, times 1 [ 89.652127][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.4.511 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 89.652152][ T7892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.652164][ T7892] Call Trace: [ 89.652171][ T7892] [ 89.652179][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 89.652226][ T7892] should_fail_ex+0x512/0x640 [ 89.652253][ T7892] ? fs_reclaim_acquire+0xae/0x150 [ 89.652273][ T7892] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 89.652297][ T7892] should_failslab+0xc2/0x120 [ 89.652323][ T7892] __kmalloc_noprof+0xd2/0x510 [ 89.652351][ T7892] tomoyo_realpath_from_path+0xc2/0x6e0 [ 89.652377][ T7892] ? tomoyo_profile+0x47/0x60 [ 89.652406][ T7892] tomoyo_path_number_perm+0x245/0x580 [ 89.652426][ T7892] ? tomoyo_path_number_perm+0x237/0x580 [ 89.652450][ T7892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.652473][ T7892] ? find_held_lock+0x2b/0x80 [ 89.652518][ T7892] ? find_held_lock+0x2b/0x80 [ 89.652539][ T7892] ? hook_file_ioctl_common+0x145/0x410 [ 89.652572][ T7892] ? __fget_files+0x20e/0x3c0 [ 89.652600][ T7892] security_file_ioctl+0x9b/0x240 [ 89.652626][ T7892] __x64_sys_ioctl+0xb7/0x210 [ 89.652648][ T7892] do_syscall_64+0xcd/0x4c0 [ 89.652676][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.652694][ T7892] RIP: 0033:0x7f8776d8e929 [ 89.652709][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.652725][ T7892] RSP: 002b:00007f8777b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.652742][ T7892] RAX: ffffffffffffffda RBX: 00007f8776fb5fa0 RCX: 00007f8776d8e929 [ 89.652753][ T7892] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 89.652763][ T7892] RBP: 00007f8777b77090 R08: 0000000000000000 R09: 0000000000000000 [ 89.652773][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.652783][ T7892] R13: 0000000000000000 R14: 00007f8776fb5fa0 R15: 00007ffcdab47068 [ 89.652807][ T7892] [ 89.652815][ T7892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 89.767896][ T7892] kvm: pic: single mode not supported [ 89.768732][ T7892] kvm: pic: single mode not supported [ 89.789308][ T7892] kvm: pic: level sensitive irq not supported [ 89.792590][ T7892] kvm: pic: non byte read [ 89.800305][ T7892] kvm: pic: non byte read [ 89.891947][ T7913] loop8: detected capacity change from 0 to 8 [ 89.895198][ T7913] Dev loop8: unable to read RDB block 8 [ 89.896975][ T7913] loop8: unable to read partition table [ 89.899099][ T7913] loop8: partition table beyond EOD, truncated [ 89.901164][ T7913] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 89.909371][ T7915] trusted_key: encrypted_key: insufficient parameters specified [ 89.973170][ T7918] kvm: pic: single mode not supported [ 89.974454][ T7918] kvm: pic: single mode not supported [ 89.981643][ T7918] kvm: pic: non byte read [ 89.985624][ T7918] kvm: pic: non byte read [ 89.998633][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 89.998644][ T40] audit: type=1400 audit(2000000030.959:25060): avc: denied { read } for pid=7922 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.007938][ T40] audit: type=1400 audit(2000000030.959:25061): avc: denied { write } for pid=7917 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.017995][ T7920] kvm: pic: single mode not supported [ 90.018612][ T7920] kvm: pic: single mode not supported [ 90.288087][ T40] audit: type=1400 audit(2000000031.249:25062): avc: denied { ioctl } for pid=7941 comm="syz.6.526" path="socket:[21780]" dev="sockfs" ino=21780 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.305324][ T7945] FAULT_INJECTION: forcing a failure. [ 90.305324][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.305578][ T40] audit: type=1400 audit(2000000031.269:25063): avc: denied { sys_module } for pid=7941 comm="syz.6.526" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.310411][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.4.527 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 90.310436][ T7945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.310447][ T7945] Call Trace: [ 90.310454][ T7945] [ 90.310461][ T7945] dump_stack_lvl+0x16c/0x1f0 [ 90.310491][ T7945] should_fail_ex+0x512/0x640 [ 90.310519][ T7945] strncpy_from_user+0x3b/0x2e0 [ 90.310542][ T7945] getname_flags.part.0+0x8f/0x550 [ 90.310560][ T7945] ? bpf_lsm_capable+0x9/0x10 [ 90.310582][ T7945] getname_flags+0x93/0xf0 [ 90.310604][ T7945] __do_sys_move_mount+0x3cc/0x7d0 [ 90.310634][ T7945] ? __pfx___do_sys_move_mount+0x10/0x10 [ 90.310658][ T7945] ? ksys_write+0x1ac/0x250 [ 90.310679][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 90.310708][ T7945] do_syscall_64+0xcd/0x4c0 [ 90.310734][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.310751][ T7945] RIP: 0033:0x7f8776d8e929 [ 90.310765][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.310782][ T7945] RSP: 002b:00007f8777b77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 90.310798][ T7945] RAX: ffffffffffffffda RBX: 00007f8776fb5fa0 RCX: 00007f8776d8e929 [ 90.310809][ T7945] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 90.310819][ T7945] RBP: 00007f8777b77090 R08: 0000000000000100 R09: 0000000000000000 [ 90.310829][ T7945] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 90.310838][ T7945] R13: 0000000000000000 R14: 00007f8776fb5fa0 R15: 00007ffcdab47068 [ 90.310881][ T7945] [ 90.369676][ T40] audit: type=1400 audit(2000000031.309:25064): avc: denied { create } for pid=7941 comm="syz.6.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.392421][ T40] audit: type=1400 audit(2000000031.349:25065): avc: denied { write } for pid=7948 comm="syz.6.528" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.400310][ T7954] netlink: 124 bytes leftover after parsing attributes in process `syz.4.529'. [ 90.400993][ T40] audit: type=1400 audit(2000000031.349:25066): avc: denied { open } for pid=7948 comm="syz.6.528" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.412229][ T40] audit: type=1400 audit(2000000031.359:25067): avc: denied { write } for pid=7953 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.419362][ T40] audit: type=1400 audit(2000000031.359:25068): avc: denied { nlmsg_write } for pid=7953 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.427882][ T40] audit: type=1400 audit(2000000031.389:25069): avc: denied { read } for pid=7953 comm="syz.4.529" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.444837][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.530'. [ 90.448164][ T7958] team0: No ports can be present during mode change [ 90.487151][ T7962] netlink: 'syz.4.531': attribute type 10 has an invalid length. [ 90.491209][ T7961] xt_hashlimit: size too large, truncated to 1048576 [ 90.502473][ T7962] veth0_vlan: left promiscuous mode [ 90.509073][ T7962] veth0_vlan: entered promiscuous mode [ 90.517066][ T7962] team0: Device veth0_vlan failed to register rx_handler [ 90.589540][ T7969] lo: entered promiscuous mode [ 90.592092][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.535'. [ 90.596587][ T7969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.638807][ T7972] loop2: detected capacity change from 0 to 7 [ 90.641539][ T7972] Dev loop2: unable to read RDB block 7 [ 90.643815][ T7972] loop2: AHDI p1 p2 p3 [ 90.647942][ T7972] loop2: partition table partially beyond EOD, truncated [ 90.650013][ T7972] loop2: p1 start 1601398130 is beyond EOD, truncated [ 90.652035][ T7972] loop2: p2 start 1702059890 is beyond EOD, truncated [ 90.690659][ T7976] FAULT_INJECTION: forcing a failure. [ 90.690659][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 90.695895][ T7976] CPU: 3 UID: 0 PID: 7976 Comm: syz.5.538 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 90.695919][ T7976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.695930][ T7976] Call Trace: [ 90.695937][ T7976] [ 90.695943][ T7976] dump_stack_lvl+0x16c/0x1f0 [ 90.695974][ T7976] should_fail_ex+0x512/0x640 [ 90.695997][ T7976] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 90.696022][ T7976] should_failslab+0xc2/0x120 [ 90.696048][ T7976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 90.696070][ T7976] ? getname_flags.part.0+0x4c/0x550 [ 90.696092][ T7976] getname_flags.part.0+0x4c/0x550 [ 90.696109][ T7976] ? bpf_lsm_capable+0x9/0x10 [ 90.696129][ T7976] getname_flags+0x93/0xf0 [ 90.696150][ T7976] __do_sys_move_mount+0x3e3/0x7d0 [ 90.696173][ T7976] ? __pfx___do_sys_move_mount+0x10/0x10 [ 90.696192][ T7976] ? ksys_write+0x1ac/0x250 [ 90.696209][ T7976] ? __pfx_ksys_write+0x10/0x10 [ 90.696231][ T7976] do_syscall_64+0xcd/0x4c0 [ 90.696256][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.696272][ T7976] RIP: 0033:0x7f1178b8e929 [ 90.696285][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.696299][ T7976] RSP: 002b:00007f117992a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 90.696313][ T7976] RAX: ffffffffffffffda RBX: 00007f1178db5fa0 RCX: 00007f1178b8e929 [ 90.696323][ T7976] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 90.696333][ T7976] RBP: 00007f117992a090 R08: 0000000000000100 R09: 0000000000000000 [ 90.696342][ T7976] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 90.696350][ T7976] R13: 0000000000000000 R14: 00007f1178db5fa0 R15: 00007ffee8278ba8 [ 90.696380][ T7976] [ 90.760241][ T7974] team_slave_0: entered promiscuous mode [ 90.770521][ T7974] team_slave_1: entered promiscuous mode [ 90.774997][ T7974] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 90.778103][ T7974] team0: Device macvtap1 is already an upper device of the team interface [ 90.782877][ T7974] team_slave_0: left promiscuous mode [ 90.785271][ T7974] team_slave_1: left promiscuous mode [ 90.793243][ T7982] loop8: detected capacity change from 0 to 8 [ 90.796950][ T7982] Dev loop8: unable to read RDB block 8 [ 90.799343][ T7982] loop8: unable to read partition table [ 90.801783][ T7982] loop8: partition table beyond EOD, truncated [ 90.804601][ T7982] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 90.866602][ T7984] sp0: Synchronizing with TNC [ 91.096550][ T7995] ip6t_rpfilter: unknown options [ 91.103030][ T7995] ntfs3(sr0): Primary boot signature is not NTFS. [ 91.105758][ T7995] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 91.202626][ T8007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8007 comm=syz.0.548 [ 91.306606][ T8020] loop2: detected capacity change from 0 to 7 [ 91.309826][ T8020] Dev loop2: unable to read RDB block 7 [ 91.311618][ T8020] loop2: AHDI p1 p2 p3 [ 91.312973][ T8020] loop2: partition table partially beyond EOD, truncated [ 91.315473][ T8020] loop2: p1 start 1601398130 is beyond EOD, truncated [ 91.317629][ T8020] loop2: p2 start 1702059890 is beyond EOD, truncated [ 91.404303][ T8030] FAULT_INJECTION: forcing a failure. [ 91.404303][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.410143][ T8030] CPU: 2 UID: 0 PID: 8030 Comm: syz.0.556 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 91.410168][ T8030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.410179][ T8030] Call Trace: [ 91.410186][ T8030] [ 91.410194][ T8030] dump_stack_lvl+0x16c/0x1f0 [ 91.410224][ T8030] should_fail_ex+0x512/0x640 [ 91.410250][ T8030] _copy_to_user+0x32/0xd0 [ 91.410277][ T8030] simple_read_from_buffer+0xcb/0x170 [ 91.410302][ T8030] proc_fail_nth_read+0x197/0x270 [ 91.410326][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.410350][ T8030] ? rw_verify_area+0xcf/0x680 [ 91.410368][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.410389][ T8030] vfs_read+0x1e4/0xc60 [ 91.410414][ T8030] ? __pfx___mutex_lock+0x10/0x10 [ 91.410440][ T8030] ? __pfx_vfs_read+0x10/0x10 [ 91.410468][ T8030] ? __fget_files+0x20e/0x3c0 [ 91.410499][ T8030] ksys_read+0x12a/0x250 [ 91.410519][ T8030] ? __pfx_ksys_read+0x10/0x10 [ 91.410541][ T8030] ? fd_install+0x244/0x750 [ 91.410567][ T8030] do_syscall_64+0xcd/0x4c0 [ 91.410594][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.410612][ T8030] RIP: 0033:0x7f398d78d33c [ 91.410627][ T8030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.410643][ T8030] RSP: 002b:00007f398e673030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.410660][ T8030] RAX: ffffffffffffffda RBX: 00007f398d9b5fa0 RCX: 00007f398d78d33c [ 91.410671][ T8030] RDX: 000000000000000f RSI: 00007f398e6730a0 RDI: 0000000000000004 [ 91.410681][ T8030] RBP: 00007f398e673090 R08: 0000000000000000 R09: 0000000000000000 [ 91.410691][ T8030] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 91.410702][ T8030] R13: 0000000000000000 R14: 00007f398d9b5fa0 R15: 00007ffc46a30e98 [ 91.410725][ T8030] [ 91.544718][ T8034] FAULT_INJECTION: forcing a failure. [ 91.544718][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.549482][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.5.557 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 91.549497][ T8034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.549504][ T8034] Call Trace: [ 91.549508][ T8034] [ 91.549512][ T8034] dump_stack_lvl+0x16c/0x1f0 [ 91.549531][ T8034] should_fail_ex+0x512/0x640 [ 91.549548][ T8034] __kvm_read_guest_page+0x186/0x250 [ 91.549562][ T8034] kvm_fetch_guest_virt+0x128/0x1a0 [ 91.549574][ T8034] __do_insn_fetch_bytes+0x41b/0x6d0 [ 91.549592][ T8034] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 91.549607][ T8034] ? kvm_io_bus_write+0x139/0x2a0 [ 91.549617][ T8034] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 91.549632][ T8034] x86_decode_insn+0xb90/0x5540 [ 91.549649][ T8034] ? vmx_segment_cache_test_set+0x14b/0x400 [ 91.549665][ T8034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.549678][ T8034] ? __pfx_x86_decode_insn+0x10/0x10 [ 91.549690][ T8034] ? vmx_cache_reg+0x333/0x5e0 [ 91.549703][ T8034] ? kvm_register_read_raw+0xe9/0x240 [ 91.549714][ T8034] ? init_decode_cache+0xd/0x210 [ 91.549725][ T8034] ? init_emulate_ctxt+0x337/0x510 [ 91.549738][ T8034] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 91.549750][ T8034] ? stack_trace_save+0x8e/0xc0 [ 91.549768][ T8034] x86_emulate_instruction+0x9b2/0x1a90 [ 91.549784][ T8034] ? __pfx_handle_io+0x10/0x10 [ 91.549798][ T8034] handle_io+0x261/0x2b0 [ 91.549812][ T8034] vmx_handle_exit+0x124c/0x1bd0 [ 91.549831][ T8034] vcpu_run+0x315e/0x5500 [ 91.549848][ T8034] ? __pfx_vcpu_run+0x10/0x10 [ 91.549862][ T8034] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 91.549873][ T8034] ? __local_bh_enable_ip+0xa4/0x120 [ 91.549888][ T8034] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 91.549899][ T8034] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 91.549915][ T8034] kvm_vcpu_ioctl+0x5eb/0x1690 [ 91.549929][ T8034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.549945][ T8034] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 91.549961][ T8034] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.549979][ T8034] ? hook_file_ioctl_common+0x145/0x410 [ 91.549999][ T8034] ? selinux_file_ioctl+0x180/0x270 [ 91.550012][ T8034] ? selinux_file_ioctl+0xb4/0x270 [ 91.550026][ T8034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.550039][ T8034] __x64_sys_ioctl+0x18b/0x210 [ 91.550052][ T8034] do_syscall_64+0xcd/0x4c0 [ 91.550068][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.550079][ T8034] RIP: 0033:0x7f1178b8e929 [ 91.550088][ T8034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.550098][ T8034] RSP: 002b:00007f117992a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.550108][ T8034] RAX: ffffffffffffffda RBX: 00007f1178db5fa0 RCX: 00007f1178b8e929 [ 91.550114][ T8034] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 91.550124][ T8034] RBP: 00007f117992a090 R08: 0000000000000000 R09: 0000000000000000 [ 91.550130][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.550136][ T8034] R13: 0000000000000000 R14: 00007f1178db5fa0 R15: 00007ffee8278ba8 [ 91.550150][ T8034] [ 91.601250][ T8045] vivid-000: ================= START STATUS ================= [ 91.672273][ T8045] vivid-000: Test Pattern: 75% Colorbar [ 91.680333][ T8045] vivid-000: Fill Percentage of Frame: 100 [ 91.682298][ T8045] vivid-000: Horizontal Movement: No Movement [ 91.685880][ T8045] vivid-000: Vertical Movement: No Movement [ 91.687724][ T8045] vivid-000: OSD Text Mode: All [ 91.689328][ T8045] vivid-000: Show Border: false [ 91.690897][ T8045] vivid-000: Show Square: false [ 91.692441][ T8045] vivid-000: Sensor Flipped Horizontally: false [ 91.695476][ T8045] vivid-000: Sensor Flipped Vertically: false [ 91.697438][ T8045] vivid-000: Insert SAV Code in Image: false [ 91.699337][ T8045] vivid-000: Insert EAV Code in Image: false [ 91.701188][ T8045] vivid-000: Insert Video Guard Band: false [ 91.703112][ T8045] vivid-000: Reduced Framerate: false [ 91.708635][ T8045] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 91.711096][ T8045] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 91.713806][ T8045] vivid-000: Enable Capture Cropping: true [ 91.716050][ T8045] vivid-000: Enable Capture Composing: true [ 91.717969][ T8045] vivid-000: Enable Capture Scaler: true [ 91.719758][ T8045] vivid-000: Timestamp Source: End of Frame [ 91.721708][ T8045] vivid-000: Colorspace: sRGB [ 91.723192][ T8045] vivid-000: Transfer Function: Default [ 91.728992][ T8045] vivid-000: Y'CbCr Encoding: Default [ 91.731326][ T8045] vivid-000: HSV Encoding: Hue 0-179 [ 91.733989][ T8045] vivid-000: Quantization: Default [ 91.736345][ T8045] vivid-000: Apply Alpha To Red Only: false [ 91.738225][ T8045] vivid-000: Standard Aspect Ratio: 4x3 [ 91.739998][ T8045] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 91.742399][ T8045] vivid-000: DV Timings: 720x480p59 inactive [ 91.745007][ T8045] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 91.745051][ T8057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.748113][ T8045] vivid-000: Maximum EDID Blocks: 2 [ 91.752997][ T8045] vivid-000: Limited RGB Range (16-235): false [ 91.756231][ T8045] vivid-000: Rx RGB Quantization Range: Automatic [ 91.758648][ T8045] vivid-000: Power Present: 0x00000001 [ 91.760745][ T8045] tpg source WxH: 320x180 (Y'CbCr) [ 91.762789][ T8045] tpg field: 1 [ 91.764730][ T8045] tpg crop: (0,0)/320x180 [ 91.766277][ T8045] tpg compose: (0,0)/320x180 [ 91.767238][ T8060] loop2: detected capacity change from 0 to 7 [ 91.768042][ T8045] tpg colorspace: 8 [ 91.770487][ T8060] Dev loop2: unable to read RDB block 7 [ 91.771553][ T8045] tpg transfer function: 0/0 [ 91.773317][ T8060] loop2: AHDI p1 p2 p3 [ 91.775755][ T8045] tpg Y'CbCr encoding: 0/0 [ 91.778954][ T8045] tpg quantization: 0/0 [ 91.780783][ T8045] tpg RGB range: 0/2 [ 91.782138][ T8045] vivid-000: ================== END STATUS ================== [ 91.782510][ T8060] loop2: partition table partially beyond EOD, truncated [ 91.787887][ T8060] loop2: p1 start 1601398130 is beyond EOD, truncated [ 91.790786][ T8060] loop2: p2 start 1702059890 is beyond EOD, truncated [ 91.836073][ T8062] vxcan1 speed is unknown, defaulting to 1000 [ 91.959122][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 91.974097][ T8068] netlink: 'syz.5.567': attribute type 1 has an invalid length. [ 91.979846][ T8068] netlink: 224 bytes leftover after parsing attributes in process `syz.5.567'. [ 92.018381][ T8074] netlink: 52 bytes leftover after parsing attributes in process `syz.6.570'. [ 92.198225][ T8091] loop2: detected capacity change from 0 to 7 [ 92.201470][ T8091] Dev loop2: unable to read RDB block 7 [ 92.206780][ T8091] loop2: AHDI p1 p2 p3 [ 92.208925][ T8091] loop2: partition table partially beyond EOD, truncated [ 92.211899][ T8091] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.215143][ T8091] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.333709][ T8100] fuse: Unknown parameter '000000000000000000000040x00000000000000040xffffffffffffffff00000000000000000000' [ 92.339872][ T8100] fuse: Bad value for 'group_id' [ 92.341637][ T8100] fuse: Bad value for 'group_id' [ 92.349997][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.578'. [ 92.359875][ T8100] netlink: 56 bytes leftover after parsing attributes in process `syz.6.578'. [ 92.363231][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.578'. [ 92.482896][ T8115] kvm: pic: single mode not supported [ 92.484177][ T8115] kvm: pic: single mode not supported [ 92.492736][ T8115] kvm: pic: level sensitive irq not supported [ 92.495991][ T8115] kvm: pic: non byte read [ 92.499985][ T8115] kvm: pic: non byte read [ 92.604257][ T8131] loop2: detected capacity change from 0 to 7 [ 92.606735][ T8131] Dev loop2: unable to read RDB block 7 [ 92.609005][ T8131] loop2: AHDI p1 p2 p3 [ 92.610753][ T8131] loop2: partition table partially beyond EOD, truncated [ 92.614129][ T8131] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.617456][ T8131] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.656862][ T8136] loop8: detected capacity change from 0 to 8 [ 92.660300][ T8136] Dev loop8: unable to read RDB block 8 [ 92.662858][ T8136] loop8: unable to read partition table [ 92.665752][ T8136] loop8: partition table beyond EOD, truncated [ 92.668473][ T8136] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 92.838401][ T8156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=8156 comm=syz.0.592 [ 93.046051][ T8171] bridge_slave_0: left allmulticast mode [ 93.047948][ T8171] bridge_slave_0: left promiscuous mode [ 93.051307][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.060367][ T8171] bridge_slave_1: left allmulticast mode [ 93.062773][ T8171] bridge_slave_1: left promiscuous mode [ 93.066802][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.077183][ T8171] bond0: (slave bond_slave_0): Releasing backup interface [ 93.083599][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.089689][ T8171] bond0: (slave bond_slave_1): Releasing backup interface [ 93.108424][ T8171] team0: Port device team_slave_0 removed [ 93.115965][ T8171] team0: Port device team_slave_1 removed [ 93.118321][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.120800][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.124199][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.126708][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.135935][ T55] vxcan1 speed is unknown, defaulting to 1000 [ 93.145430][ T8172] team0: Mode changed to "random" [ 93.149351][ T8175] vlan0: entered promiscuous mode [ 93.159969][ T8175] team0: Port device vlan0 added [ 93.162746][ T8171] tipc: Started in network mode [ 93.165833][ T8171] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 93.168650][ T8171] tipc: Enabled bearer , priority 0 [ 93.171363][ T8172] tipc: Enabling of bearer rejected, already enabled [ 93.254639][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 93.262769][ T8185] netlink: 'syz.0.596': attribute type 12 has an invalid length. [ 93.264894][ T53] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.269545][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.273146][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 93.284715][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 93.288973][ T53] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 93.292625][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.303997][ T53] hub 9-1:1.0: bad descriptor, ignoring hub [ 93.305929][ T53] hub 9-1:1.0: probe with driver hub failed with error -5 [ 93.308423][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 93.310040][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 93.315540][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 93.317410][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 93.391819][ T8191] xt_l2tp: unknown flags: 17 [ 93.448690][ T8203] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 93.458042][ T8203] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 93.477019][ T8208] vxcan1 speed is unknown, defaulting to 1000 [ 93.554385][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.601'. [ 93.614910][ T6000] usb 9-1: USB disconnect, device number 4 [ 93.710626][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.716444][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.721479][ T8155] dlm: non-version read from control device 238 [ 93.724566][ T8235] dlm: non-version read from control device 238 [ 93.763475][ T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.916876][ T55] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.921309][ T55] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.926176][ T55] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.930092][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.937730][ T8213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.947505][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.043583][ T8276] vxcan1 speed is unknown, defaulting to 1000 [ 94.148787][ T6000] usb 5-1: USB disconnect, device number 5 [ 94.172190][ T8273] kvm_pr_unimpl_wrmsr: 14 callbacks suppressed [ 94.172204][ T8273] kvm: kvm [8272]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 94.195245][ T55] tipc: Node number set to 11578026 [ 94.501080][ T8301] loop8: detected capacity change from 0 to 8 [ 94.507399][ T8301] Dev loop8: unable to read RDB block 8 [ 94.509874][ T8301] loop8: unable to read partition table [ 94.512453][ T8301] loop8: partition table beyond EOD, truncated [ 94.516440][ T8301] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 94.584955][ T8304] pic_ioport_write: 1 callbacks suppressed [ 94.584971][ T8304] kvm: pic: single mode not supported [ 94.588192][ T8304] kvm: pic: single mode not supported [ 94.859110][ T8322] atomic_op ffff8880487b6998 conn xmit_atomic 0000000000000000 [ 94.915150][ T5943] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 95.013429][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 95.013441][ T40] audit: type=1400 audit(2000000035.969:25134): avc: denied { setopt } for pid=8326 comm="syz.6.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.022802][ T40] audit: type=1400 audit(2000000035.969:25135): avc: denied { connect } for pid=8326 comm="syz.6.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.043624][ T40] audit: type=1400 audit(2000000035.999:25136): avc: denied { setopt } for pid=8337 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.061971][ T40] audit: type=1400 audit(2000000035.999:25137): avc: denied { create } for pid=8337 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.077031][ T40] audit: type=1400 audit(2000000035.999:25138): avc: denied { write } for pid=8337 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.092376][ T40] audit: type=1400 audit(2000000036.039:25139): avc: denied { mount } for pid=8343 comm="syz.6.624" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.101755][ T40] audit: type=1400 audit(2000000036.059:25140): avc: denied { unmount } for pid=7086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.125657][ T8350] loop2: detected capacity change from 0 to 7 [ 95.129379][ T8350] Dev loop2: unable to read RDB block 7 [ 95.132207][ T8350] loop2: AHDI p1 p2 p3 [ 95.135466][ T8350] loop2: partition table partially beyond EOD, truncated [ 95.138100][ T8350] loop2: p1 start 1601398130 is beyond EOD, truncated [ 95.140754][ T8350] loop2: p2 start 1702059890 is beyond EOD, truncated [ 95.208016][ T40] audit: type=1400 audit(2000000036.169:25141): avc: denied { accept } for pid=8360 comm="syz.6.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.257004][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.319285][ T40] audit: type=1400 audit(2000000036.279:25142): avc: denied { read } for pid=8373 comm="syz.0.631" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.326943][ T40] audit: type=1400 audit(2000000036.279:25143): avc: denied { open } for pid=8373 comm="syz.0.631" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.337076][ T8379] netlink: 'syz.6.633': attribute type 10 has an invalid length. [ 95.377742][ T8386] loop2: detected capacity change from 0 to 7 [ 95.380667][ T8386] Dev loop2: unable to read RDB block 7 [ 95.382726][ T8386] loop2: AHDI p1 p2 p3 [ 95.384407][ T8386] loop2: partition table partially beyond EOD, truncated [ 95.387073][ T8386] loop2: p1 start 1601398130 is beyond EOD, truncated [ 95.389342][ T8386] loop2: p2 start 1702059890 is beyond EOD, truncated [ 95.430306][ T8383] CIFS mount error: No usable UNC path provided in device string! [ 95.430306][ T8383] [ 95.434902][ T8383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 95.442041][ T8394] loop8: detected capacity change from 0 to 8 [ 95.445298][ T8394] Dev loop8: unable to read RDB block 8 [ 95.447411][ T8394] loop8: unable to read partition table [ 95.449896][ T8394] loop8: partition table beyond EOD, truncated [ 95.452582][ T8394] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 95.610231][ T8414] vxcan1 speed is unknown, defaulting to 1000 [ 95.614424][ T8388] kvm: kvm [8387]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 95.615757][ T8412] kvm: pic: single mode not supported [ 95.618950][ T8412] kvm: pic: single mode not supported [ 95.649600][ T8416] netlink: 'syz.4.644': attribute type 4 has an invalid length. [ 95.724519][ T8424] __nla_validate_parse: 3 callbacks suppressed [ 95.724531][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.644'. [ 95.848387][ T8432] nftables ruleset with unbound chain [ 95.896232][ T8437] loop8: detected capacity change from 0 to 8 [ 95.899133][ T8437] Dev loop8: unable to read RDB block 8 [ 95.901456][ T8437] loop8: unable to read partition table [ 95.904804][ T8437] loop8: partition table beyond EOD, truncated [ 95.907379][ T8437] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 96.283494][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 96.435336][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 96.440102][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.446034][ T10] usb 9-1: config 0 has no interface number 0 [ 96.449151][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.453593][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 96.458069][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.462779][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.472211][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 96.478350][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.483155][ T10] usb 9-1: config 0 descriptor?? [ 96.492170][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.555377][ T8465] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 96.556137][ T8462] 9p: Unknown Cache mode or invalid value mmap>@|n{6sjU)o/Y]J/Pfʟ"nl80211 [ 96.689745][ T6000] usb 9-1: USB disconnect, device number 5 [ 96.695760][ T6000] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 96.714558][ T8482] tipc: Started in network mode [ 96.716402][ T8482] tipc: Node identity ac14140f, cluster identity 4711 [ 96.719437][ T8482] tipc: New replicast peer: 0.0.255.255 [ 96.721675][ T8482] tipc: Enabled bearer , priority 10 [ 96.775705][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 96.819326][ T8490] CIFS: Unable to determine destination address [ 96.825604][ T8486] kvm: pic: single mode not supported [ 96.826545][ T8486] kvm: pic: single mode not supported [ 96.834739][ T8486] kvm: pic: single mode not supported [ 96.837032][ T8486] kvm: pic: level sensitive irq not supported [ 96.840001][ T8486] kvm: pic: non byte read [ 96.844982][ T8486] kvm: pic: non byte read [ 96.893868][ T8445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.896829][ T8445] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 96.902819][ T8445] ================================================================== [ 96.906191][ T8445] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.909932][ T8445] Read of size 8 at addr ffff88805b11f558 by task syz.5.652/8445 [ 96.914985][ T8445] [ 96.915980][ T8445] CPU: 2 UID: 0 PID: 8445 Comm: syz.5.652 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 96.916003][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.916015][ T8445] Call Trace: [ 96.916024][ T8445] [ 96.916030][ T8445] dump_stack_lvl+0x116/0x1f0 [ 96.916069][ T8445] print_report+0xcd/0x680 [ 96.916093][ T8445] ? __virt_addr_valid+0x81/0x610 [ 96.916113][ T8445] ? __phys_addr+0xe8/0x180 [ 96.916131][ T8445] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.916158][ T8445] kasan_report+0xe0/0x110 [ 96.916182][ T8445] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.916208][ T8445] __list_del_entry_valid_or_report+0x1d4/0x200 [ 96.916241][ T8445] bt_accept_unlink+0x34/0x2e0 [ 96.916264][ T8445] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 96.916282][ T8445] l2cap_chan_del+0xba/0x8f0 [ 96.916304][ T8445] l2cap_conn_del+0x37a/0x730 [ 96.916320][ T8445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.916349][ T8445] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 96.916369][ T8445] l2cap_disconn_cfm+0x96/0xd0 [ 96.916388][ T8445] hci_conn_hash_flush+0x10b/0x260 [ 96.916408][ T8445] hci_dev_close_sync+0x602/0x11d0 [ 96.916426][ T8445] ? __pfx_bt_err+0x10/0x10 [ 96.916447][ T8445] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 96.916464][ T8445] ? do_raw_spin_lock+0x12c/0x2b0 [ 96.916485][ T8445] hci_dev_do_close+0x2e/0x90 [ 96.916500][ T8445] hci_rfkill_set_block+0x225/0x360 [ 96.916516][ T8445] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.916539][ T8445] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 96.916556][ T8445] rfkill_set_block+0x1fe/0x550 [ 96.916577][ T8445] rfkill_fop_write+0x2c0/0x580 [ 96.916596][ T8445] ? __pfx_rfkill_fop_write+0x10/0x10 [ 96.916615][ T8445] ? bpf_lsm_inode_setsecurity+0x10/0x20 [ 96.916639][ T8445] ? security_file_permission+0x71/0x210 [ 96.916665][ T8445] ? rw_verify_area+0xcf/0x680 [ 96.916683][ T8445] ? __pfx_rfkill_fop_write+0x10/0x10 [ 96.916704][ T8445] vfs_write+0x29d/0x1150 [ 96.916728][ T8445] ? __pfx_vfs_write+0x10/0x10 [ 96.916746][ T8445] ? find_held_lock+0x2b/0x80 [ 96.916765][ T8445] ? __fget_files+0x204/0x3c0 [ 96.916790][ T8445] ? __fget_files+0x20e/0x3c0 [ 96.916813][ T8445] ksys_write+0x1f8/0x250 [ 96.916832][ T8445] ? __pfx_ksys_write+0x10/0x10 [ 96.916857][ T8445] do_syscall_64+0xcd/0x4c0 [ 96.916879][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.916897][ T8445] RIP: 0033:0x7f1178b8e929 [ 96.916912][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.916928][ T8445] RSP: 002b:00007f117992a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.916944][ T8445] RAX: ffffffffffffffda RBX: 00007f1178db5fa0 RCX: 00007f1178b8e929 [ 96.916955][ T8445] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 96.916966][ T8445] RBP: 00007f1178c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 96.916977][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.916987][ T8445] R13: 0000000000000000 R14: 00007f1178db5fa0 R15: 00007ffee8278ba8 [ 96.917001][ T8445] [ 96.917006][ T8445] [ 97.045052][ T8445] Allocated by task 5645: [ 97.046871][ T8445] kasan_save_stack+0x33/0x60 [ 97.048891][ T8445] kasan_save_track+0x14/0x30 [ 97.050889][ T8445] __kasan_kmalloc+0xaa/0xb0 [ 97.052836][ T8445] __kmalloc_noprof+0x223/0x510 [ 97.054861][ T8445] tomoyo_realpath_from_path+0xc2/0x6e0 [ 97.057152][ T8445] tomoyo_path_number_perm+0x245/0x580 [ 97.059401][ T8445] security_file_ioctl+0x9b/0x240 [ 97.061487][ T8445] __x64_sys_ioctl+0xb7/0x210 [ 97.063446][ T8445] do_syscall_64+0xcd/0x4c0 [ 97.065413][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.067878][ T8445] [ 97.068868][ T8445] Freed by task 5645: [ 97.070445][ T8445] kasan_save_stack+0x33/0x60 [ 97.072455][ T8445] kasan_save_track+0x14/0x30 [ 97.074426][ T8445] kasan_save_free_info+0x3b/0x60 [ 97.076542][ T8445] __kasan_slab_free+0x51/0x70 [ 97.078553][ T8445] kfree+0x2b4/0x4d0 [ 97.080250][ T8445] tomoyo_realpath_from_path+0x19f/0x6e0 [ 97.082472][ T8445] tomoyo_path_number_perm+0x245/0x580 [ 97.084652][ T8445] security_file_ioctl+0x9b/0x240 [ 97.086747][ T8445] __x64_sys_ioctl+0xb7/0x210 [ 97.088708][ T8445] do_syscall_64+0xcd/0x4c0 [ 97.090597][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.092953][ T8445] [ 97.093960][ T8445] The buggy address belongs to the object at ffff88805b11e000 [ 97.093960][ T8445] which belongs to the cache kmalloc-4k of size 4096 [ 97.099703][ T8445] The buggy address is located 1368 bytes to the right of [ 97.099703][ T8445] allocated 4096-byte region [ffff88805b11e000, ffff88805b11f000) [ 97.105806][ T8445] [ 97.106822][ T8445] The buggy address belongs to the physical page: [ 97.109424][ T8445] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b118 [ 97.113037][ T8445] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.116575][ T8445] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 97.119839][ T8445] page_type: f5(slab) [ 97.121535][ T8445] raw: 00fff00000000040 ffff88801b843040 0000000000000000 0000000000000001 [ 97.125075][ T8445] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 97.128674][ T8445] head: 00fff00000000040 ffff88801b843040 0000000000000000 0000000000000001 [ 97.132240][ T8445] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 97.136150][ T8445] head: 00fff00000000003 ffffea00016c4601 00000000ffffffff 00000000ffffffff [ 97.140224][ T8445] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 97.143838][ T8445] page dumped because: kasan: bad access detected [ 97.146628][ T8445] page_owner tracks the page as allocated [ 97.149013][ T8445] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8200, tgid 8200 (rm), ts 93421361310, free_ts 93396747128 [ 97.157361][ T8445] post_alloc_hook+0x1c0/0x230 [ 97.159533][ T8445] get_page_from_freelist+0x1321/0x3890 [ 97.161895][ T8445] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 97.164362][ T8445] alloc_pages_mpol+0x1fb/0x550 [ 97.166410][ T8445] new_slab+0x23b/0x330 [ 97.168200][ T8445] ___slab_alloc+0xd9c/0x1940 [ 97.170266][ T8445] __slab_alloc.constprop.0+0x56/0xb0 [ 97.172639][ T8445] __kmalloc_noprof+0x2f2/0x510 [ 97.174761][ T8445] tomoyo_realpath_from_path+0xc2/0x6e0 [ 97.177151][ T8445] tomoyo_check_open_permission+0x2ab/0x3c0 [ 97.179613][ T8445] tomoyo_file_open+0x6b/0x90 [ 97.181615][ T8445] security_file_open+0x84/0x1e0 [ 97.183690][ T8445] do_dentry_open+0x596/0x1c10 [ 97.185731][ T8445] vfs_open+0x82/0x3f0 [ 97.187465][ T8445] path_openat+0x1de4/0x2cb0 [ 97.189441][ T8445] do_filp_open+0x20b/0x470 [ 97.191319][ T8445] page last free pid 8192 tgid 8192 stack trace: [ 97.193906][ T8445] __free_frozen_pages+0x7fe/0x1180 [ 97.196096][ T8445] qlist_free_all+0x4d/0x120 [ 97.198036][ T8445] kasan_quarantine_reduce+0x195/0x1e0 [ 97.200374][ T8445] __kasan_slab_alloc+0x69/0x90 [ 97.202471][ T8445] __kmalloc_node_noprof+0x1d0/0x500 [ 97.204511][ T8445] alloc_slab_obj_exts+0x41/0xa0 [ 97.206507][ T8445] new_slab+0x283/0x330 [ 97.208240][ T8445] ___slab_alloc+0xd9c/0x1940 [ 97.209797][ T8445] __slab_alloc.constprop.0+0x56/0xb0 [ 97.211952][ T8445] kmem_cache_alloc_noprof+0xef/0x3b0 [ 97.213957][ T8445] vm_area_dup+0x27/0x8d0 [ 97.215563][ T8445] dup_mmap+0x877/0x21d0 [ 97.217064][ T8445] copy_process+0x4081/0x76a0 [ 97.218632][ T8445] kernel_clone+0xfc/0x960 [ 97.220288][ T8445] __do_sys_clone+0xce/0x120 [ 97.222072][ T8445] do_syscall_64+0xcd/0x4c0 [ 97.223683][ T8445] [ 97.224497][ T8445] Memory state around the buggy address: [ 97.226515][ T8445] ffff88805b11f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.229275][ T8445] ffff88805b11f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.231909][ T8445] >ffff88805b11f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.234973][ T8445] ^ [ 97.237478][ T8445] ffff88805b11f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.240458][ T8445] ffff88805b11f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.243825][ T8445] ================================================================== [ 97.249855][ T8445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.252420][ T8445] CPU: 3 UID: 0 PID: 8445 Comm: syz.5.652 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 97.257341][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.261580][ T8445] Call Trace: [ 97.262935][ T8445] [ 97.264115][ T8445] dump_stack_lvl+0x3d/0x1f0 [ 97.266007][ T8445] panic+0x71c/0x800 [ 97.267614][ T8445] ? __pfx_panic+0x10/0x10 [ 97.269408][ T8445] ? mark_held_locks+0x49/0x80 [ 97.271334][ T8445] ? preempt_schedule_thunk+0x16/0x30 [ 97.273452][ T8445] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 97.275981][ T8445] ? preempt_schedule_common+0x44/0xc0 [ 97.278195][ T8445] ? check_panic_on_warn+0x1f/0xb0 [ 97.280180][ T8445] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 97.282674][ T8445] check_panic_on_warn+0xab/0xb0 [ 97.284648][ T8445] end_report+0x107/0x170 [ 97.286356][ T8445] kasan_report+0xee/0x110 [ 97.288178][ T8445] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 97.290734][ T8445] __list_del_entry_valid_or_report+0x1d4/0x200 [ 97.293246][ T8445] bt_accept_unlink+0x34/0x2e0 [ 97.295179][ T8445] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 97.297283][ T8445] l2cap_chan_del+0xba/0x8f0 [ 97.299138][ T8445] l2cap_conn_del+0x37a/0x730 [ 97.301001][ T8445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.303422][ T8445] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 97.305594][ T8445] l2cap_disconn_cfm+0x96/0xd0 [ 97.307485][ T8445] hci_conn_hash_flush+0x10b/0x260 [ 97.309619][ T8445] hci_dev_close_sync+0x602/0x11d0 [ 97.311704][ T8445] ? __pfx_bt_err+0x10/0x10 [ 97.313576][ T8445] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 97.315815][ T8445] ? do_raw_spin_lock+0x12c/0x2b0 [ 97.317784][ T8445] hci_dev_do_close+0x2e/0x90 [ 97.319659][ T8445] hci_rfkill_set_block+0x225/0x360 [ 97.321786][ T8445] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.323891][ T8445] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 97.326173][ T8445] rfkill_set_block+0x1fe/0x550 [ 97.328149][ T8445] rfkill_fop_write+0x2c0/0x580 [ 97.330103][ T8445] ? __pfx_rfkill_fop_write+0x10/0x10 [ 97.332255][ T8445] ? bpf_lsm_inode_setsecurity+0x10/0x20 [ 97.334489][ T8445] ? security_file_permission+0x71/0x210 [ 97.336685][ T8445] ? rw_verify_area+0xcf/0x680 [ 97.338585][ T8445] ? __pfx_rfkill_fop_write+0x10/0x10 [ 97.340743][ T8445] vfs_write+0x29d/0x1150 [ 97.342476][ T8445] ? __pfx_vfs_write+0x10/0x10 [ 97.344365][ T8445] ? find_held_lock+0x2b/0x80 [ 97.346283][ T8445] ? __fget_files+0x204/0x3c0 [ 97.348151][ T8445] ? __fget_files+0x20e/0x3c0 [ 97.349988][ T8445] ksys_write+0x1f8/0x250 [ 97.351725][ T8445] ? __pfx_ksys_write+0x10/0x10 [ 97.353633][ T8445] do_syscall_64+0xcd/0x4c0 [ 97.355457][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.357839][ T8445] RIP: 0033:0x7f1178b8e929 [ 97.359600][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.367113][ T8445] RSP: 002b:00007f117992a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.370380][ T8445] RAX: ffffffffffffffda RBX: 00007f1178db5fa0 RCX: 00007f1178b8e929 [ 97.373468][ T8445] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 97.376596][ T8445] RBP: 00007f1178c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 97.379686][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.382758][ T8445] R13: 0000000000000000 R14: 00007f1178db5fa0 R15: 00007ffee8278ba8 [ 97.385903][ T8445] [ 97.387968][ T8445] Kernel Offset: disabled [ 97.389761][ T8445] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:14:00 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff816ac79d RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c4940 RBP=ffffc9000d3f7430 RSP=ffffc9000d3f7348 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=00000000000113f5 R12=ffffffff81a78040 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987ce5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4227a3a10 CR3=000000002571f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 637062696c2f3436 62696c2f7273752f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000570 0000000000060a90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff8e5c4940 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff822eaf04 RDI=fffffbfff1cb8928 RBP=ffffffff8e5c4940 RSP=ffffc9000418f398 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff822eaf04 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8222f6d5 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557f808500 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f398e4e56c0 CR3=0000000050b1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556552a4a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556553d037 000055556553bd20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556552ac27 000055556552ab40 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f01ffffff ffffffffffeb0802 8003000800061000 20100006006fd008 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208060601269600 0400018080080002 800401c710000802 49b200786d74702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffff149b40b9 0725001800000078 01f0080003081000 02d0ca0800010000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 466b2168a185000d 0000000a0120003f 0009005c0c040364 05fe050204be0202 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff0400100001 f010000004010000 0008060c01688050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3252f238d56ef6dd d118e20000000000 0000080008001602 0400324a00007a00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02c986ba5890507f 545939ff0cecb689 0c464ade5a934900 08000a000b00278d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640036654523d346 6b2168a185000d00 00000a0120003f00 09005c0c04036405 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030580080010030f ffffffffffff0400 0320808810000380 0401000000080606 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfc25 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc9000ca973f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b0882e0 R15=ffffffff855bfbc0 RIP=ffffffff855bfc4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f117992a6c0 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559a8328d300 CR3=000000002a85f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe33fef2e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0aa611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a6420a0 RCX=ffffffff81b001fd RDX=ffff88801dac8000 RSI=ffffffff81b001d9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900001078a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c8415 R15=ffff88806a73b580 RIP=ffffffff81b001db RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000004ff0 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee8278f30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1178c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000