last executing test programs: 51.478765081s ago: executing program 3 (id=24): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4000000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) 51.477606576s ago: executing program 3 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x84, 0x30, 0xb, 0x4, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1b, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x4}}, @TCA_CT_LABELS={0x14, 0x7, "5306a1852b07009dee616fcda6c58a45"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0xb, 0x4, 0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000003d00090000000000000000000100000004000000140001801000108008000b00", @ANYRES32=r4, @ANYBLOB="9462172c080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x6, 0x7ffffffe}]}) setreuid(0x0, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x44) mmap$usbfs(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9, 0x10010, r7, 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@RTM_GETNSID={0x24, 0x5a, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r9, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd7f, 0x0, 0x0, 0x0, 0x0, r10, r11, 0x3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r10, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x1, &(0x7f0000000e00)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfsdef}, {@euid_eq}, {@fowner_eq={'fowner', 0x3d, r10}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) syz_usb_connect(0x0, 0x582, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0x9e, 0x7d, 0xf, 0xff, 0x421, 0x108, 0x3caa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x570, 0x3, 0x4, 0xff, 0x40, 0xc, [{{0x9, 0x4, 0x77, 0x6, 0x3, 0x2, 0x2, 0xff, 0xab, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x6, 0x61, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xf6f0}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x4, 0x8f, 0x6}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x83, 0x1}}]}}, {{0x9, 0x4, 0xce, 0x8, 0xa, 0xc4, 0xc5, 0x71, 0xa, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x9, 'X{H', "31a4"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x59b4, 0x9, "e6aa"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x5a0, 0x8, "ea5369"}]}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0xfe, 0xea, 0xf8}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x8, 0xfc, 0x8, [@generic={0x24, 0xd, "1db5bcff9e0e7bf7287cd9400625a2fe1125b17202edc45a3dd0d05efb39ba438e10"}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x7, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xb6, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf6, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x4, 0x9, 0xe}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x3, 0xa}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x81, 0x74, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x25cd}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0xfd, 0x30}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x9, 0x8, 0x6c}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0xca, 0x1}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x0, 0x2, 0x2c, [@generic={0x48, 0xb, "9124421a012b2b6bac242a8d4b4cbc902b817a9ec670be8edc8ecad4b6b5c3d879dce6a4294fca13b98967e068977313ced84b2ed08006bfc9a8402fd511b0b9d4a4df9e9a66"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0xd, 0x3}}]}}, {{0x9, 0x4, 0x28, 0xa3, 0xe, 0x6a, 0x98, 0xda, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xa8, 0x6, 0x16}, {0x6, 0x24, 0x1a, 0x0, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x400}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x7, 0xfd}, @mdlm={0x15, 0x24, 0x12, 0xf333}]}], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0x1, 0x79, [@generic={0xdd, 0x5, "a067c9d5d16f773775108a9d6dc6649e68b7467e98e4ec7577d0f281984ae4181350ddddae12efe8891c8def27ba35e255816b15f8c3f9f0ab320eeec4faaa6c0c52a70f992c818a5697d76cb36b982bb83f9146b315d6c753d6384a757a56bc796b1fc95eb8bf948389065436cc2f4d5465c3c1660de432b37f11546c334fc7a8d7fe52208ffb726de8000729f6d3df851c0a608b424380e49d5aab0a1b6d633248348f4184b47fde908d4f5ccd6c0bf45e688cf94d8e971a16bfdc9c295f3d04d1079d87e7fb609ea858dc981a91c6e04fedbc3bc1a617f4b656"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x2, 0x38, 0x7, [@generic={0xa0, 0x23, "dcadf1673ca9365cd601f8b3331b5500793753d9c9fc2ad8e3a7adea5038d2a29b5be1e361ff14d4d678edab7122639d2f860e584da1a8b20220a75b5c97789617440a880699e22b74b6935a4844fc38d31acd3545e5bc17c04ccdae62b699b5363a67b8316329e094685d8c8f7b81e7e41843f4eb040b5113b587cfd593a00be341518b3ac399f58cf8ed3a105d9e92bb9188ba01f792e580b6d85358c7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x80, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xf}, @generic={0x44, 0x1, "c2b2766c0e78dbf6daac6ed7630ec7880970a609c3864bb09b95f8dea3df1eb57d6dd9e6dbc2f2c5e749d2e5608bddd606c8312bf29e680ac05d35447a052e67b8c8"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x5, 0x8, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x5, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0xe986b18df46773b8, 0x6, 0x3, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x31, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x6, 0x21, 0xff}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x0, 0x9, [@generic={0x47, 0x3, "73dcd0eaaca90d01aa68843d3423c0110e4667f64a9e062b52a81879cbc176548156ff3d24da46274cc5f535e374e6bc3c64683a85831acf5d02db99c5b0789a11c86f491f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0xf, 0x3ff, 0x1, 0x57, 0x7f, [@generic={0x46, 0x7, "744e480bcce5a4b9addd98344ab97bb071bfc072cad545be58d31a15f78c869049855e38da7d4dff66808040af6756e28298d6042ce2b43d0b0700709bf7a30e778a9bcc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0x0, 0x7, [@generic={0x26, 0x3, "a4e6f43ad020a9d1a5a4f90e410afe961c5fb956a1075e30dee1b05695c7f6b8514c2fbe"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0xe2, 0x22, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}, @generic={0xb5, 0xf, "2a8a20603ec5dc419df81e9900dd08c423a80a1bf112f02994bc1378d8318e2334a21db4df2a75be4835ac7e5046ebd22066a636307eccf070832dbe5bf326c981a7cffc365b58ac3744a586836cfaf9db360e781aa73b27d5414c83491146b6e6f6430707d5ca725a11ae410114eaab1580eaecd1d00608797bbb23627abdb5eaef5814ce21cb5b46926addfc4345ee22b9ce99a5054575c56c9179b48fada231ad190e82118546d944be2c29f2197701d4bd"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x7, 0xf8}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xf9, 0xff, 0x9, 0x10, 0x81}, 0x2f, &(0x7f0000000100)={0x5, 0xf, 0x2f, 0x1, [@generic={0x2a, 0x10, 0x3, "d4d7fcfc6887239006d5d94378d06d978bdfb999c99476575fb3d6ea83d3244025948c8a9f0aef"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100a}}, {0xfd, &(0x7f0000000980)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x71, &(0x7f0000000440)=@string={0x71, 0x3, "99155146ff64f6b891b5417bf0ca005ed7520e6c2af2260647057af60162c0a1955958995e42545fd177c7e2c121429684d56d020cc5b4529ca6519193c29781c35d9bf38826aebeefec9ff6acb767040ae98540e1af7b1ca3c592a7839f88aae4968355cd164c5ea06bd20a76827b"}}, {0x33, &(0x7f0000000b80)=@string={0x33, 0x3, "fd2270174007845adbc0cfd9e5e6544e3d26d7d96399c78005d4201acf02750bd3d8736663890d846bc1a6fcef4ed29553"}}]}) 48.397483211s ago: executing program 3 (id=70): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="22ce76153d36497eafc8d92cc0eabe5c94c4f0d4789141789566cf0cedaf921e9d4e394530d5cc54e744d5c77ff8aed542613e73b0f4e567ed69f489de31e39ef9aaaadefbecb8168ce105e921adad2587ac"], 0xe0}, 0x1, 0x0, 0x0, 0x20004891}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xf0}, 0x1, 0x0, 0x0, 0x240000d0}, 0x20000010) 48.396805662s ago: executing program 3 (id=72): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 48.31862487s ago: executing program 3 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7375626a5f747970653d6465767074730065e4d8fc3d312efcdbe09a6f30f2116b5dd59be8e08ffe1f4f2b676ada31371f52bcb2cf63b164090000002d848797afc5e99f9b661e6c3137ef566c60322e5360a805c0e14bca9b362c00"]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0xc5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x4, &(0x7f00000000c0)='\x06\xc0\x0f{\xdc^{7\bw\xf3;\xbc\xe7\xba\xb4\xa6k)\xfaX\xef7Y') 48.136129503s ago: executing program 3 (id=78): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ftruncate(r1, 0x400001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 48.097242747s ago: executing program 32 (id=78): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ftruncate(r1, 0x400001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 35.227391448s ago: executing program 2 (id=238): semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000100)=""/228) 35.22710368s ago: executing program 2 (id=239): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000010100c0"]) add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)="2e98", 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) getsockopt$packet_int(r6, 0x107, 0x15, 0x0, &(0x7f0000000200)) r7 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2) ppoll(&(0x7f0000000e80)=[{r7, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x2, r10}) sendmmsg$unix(r8, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r11, 0x15, 0x0, @void}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=statdc:,\x00']) 35.03766645s ago: executing program 2 (id=240): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x1, 0x0, 0x1}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) 34.917850125s ago: executing program 2 (id=242): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x24, 0x29, 0x300, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x4, 0xd}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0xffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x24, 0x29, 0x300, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x4, 0xd}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x2) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 34.867970004s ago: executing program 2 (id=243): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) 34.708188484s ago: executing program 2 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) 19.735511386s ago: executing program 33 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) 16.697883234s ago: executing program 1 (id=447): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000100), 0x800) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) write$qrtrtun(r0, &(0x7f0000000600)="9d8d64c117db57", 0x7) (async, rerun: 32) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 16.619549475s ago: executing program 1 (id=448): r0 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r1, 0x4601, 0x20000000) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000004940)={0x9f0000, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0}) 16.619174324s ago: executing program 1 (id=449): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000180), &(0x7f0000000480)}, 0x20) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c157f2f8"}}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) 16.475961391s ago: executing program 1 (id=450): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="28800100000000000500110001000000140003006272696467655f736c4176655f30"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x494881, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000040)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYRESOCT=r8, @ANYRESOCT=r8, @ANYRESOCT=r1, @ANYRES32=r4, @ANYRESDEC=r6, @ANYRESOCT=r6], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x10) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000002d40)=""/239) 16.473949781s ago: executing program 1 (id=452): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x55, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'bond_slave_0\x00', 0x40}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x55, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'bond_slave_0\x00', 0x40}) (async) 16.229246851s ago: executing program 1 (id=455): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2512000000060028000000000008000300", @ANYRES32=r6, @ANYBLOB="000000000000000090a27bd0730b111c747b7ba5efd652b6952bd4ca98744daa9e87e5327bb17f5bf90bc4a92a77822d99ebb1f04b3a80e505cba5dcddc2bfe0f0de62f2ea5ca2a8da77cd25ed7b5d22a9f3ad8d16558a32f3d30a9fd906408af9e0c856bb4a851b5907ad834eb9a6c6cf1cbd6dd0bcf72b2b32628769dfe93d917e26fecb4d27d1c85cfd398cb2d8a7c2947142b1dc27ad51d7ba362f7d2ad4c0159eeb923c9751cea4d510017991219ee9a4d7435295"], 0x2c}}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00", @ANYRES8=r8], 0x125) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 16.20966501s ago: executing program 34 (id=455): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2512000000060028000000000008000300", @ANYRES32=r6, @ANYBLOB="000000000000000090a27bd0730b111c747b7ba5efd652b6952bd4ca98744daa9e87e5327bb17f5bf90bc4a92a77822d99ebb1f04b3a80e505cba5dcddc2bfe0f0de62f2ea5ca2a8da77cd25ed7b5d22a9f3ad8d16558a32f3d30a9fd906408af9e0c856bb4a851b5907ad834eb9a6c6cf1cbd6dd0bcf72b2b32628769dfe93d917e26fecb4d27d1c85cfd398cb2d8a7c2947142b1dc27ad51d7ba362f7d2ad4c0159eeb923c9751cea4d510017991219ee9a4d7435295"], 0x2c}}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00", @ANYRES8=r8], 0x125) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 2.369610525s ago: executing program 0 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r1, @ANYRES64=r0], 0x28}}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYRES8], 0xfdef) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10162, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1}, 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0xf3, 0x8, 0x0, 0x0}}, 0x2f) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcee, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000bc00"/20, @ANYRES32=r11], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x8000, 0x41, 0x5, 0xc65, {{0x1c, 0x4, 0x3, 0x1f, 0x70, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @empty, {[@timestamp={0x44, 0x28, 0xbe, 0x0, 0xc, [0x15596a52, 0x40, 0x406c, 0x1400000, 0x6, 0x2, 0x3ff, 0x6, 0x0]}, @end, @rr={0x7, 0xb, 0x86, [@multicast2, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x9}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0xa2}, @end, @end, @noop, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000fddbdf250300000005000200010000004800018008000100", @ANYRES32=r6, @ANYBLOB="08000300020000001400020070696d3672656700000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08023baf", @ANYRES32=r13, @ANYBLOB="080003000200000008000300000000000500020004000000"], 0x6c}}, 0x40010) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001100"/28], 0x48) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000f000000000000080000008725eb0000002b24673e3e1fd04718811afea9211d7229746c29cb8de6fef50ff38961758512a8e2c13c9f19bab36659ea43f3e0a7c0015c15fde7afd6fb630c488d40aac568641d34b0e139f1570bf3be27489f38d66e13cff65c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r15, &(0x7f00000009c0)="dc0ece1585b10e6f5b8857131db5d70fa2d33aea825a578c5fcebfeaff7eecbb66075a9b0cd8aeb92ec207334af3b95da9de7088ccc4ca325d4a98879ed306ffa4767cd081f62b446a6b6fccde3c1d3e290f3be6f556f7de02e7fab7d40eb8daf41c6a655cb745dd144fb429257335071e01ed8dff0ac97a9eacb1e55efb6d9f7ff903b5ce9242e497d8d3d88aa955dc10527214082f126f09c30119d7200fdd5d0e14d5f5bba176fa852207ea7e41e9d18651df2badf98f8b38b20c716b8bee6f841a40c160483361bbb9ca89593ee679b7e655f47113d84ff22bca4403a3a67379a0bc", &(0x7f0000000ac0)=""/149}, 0x20) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000001800)=ANY=[@ANYBLOB="1808000000000000000000000500000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000d3b60bd3febd1f3c10a5ddfb97812f2b005d9800000000000056080000000300000000000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r16, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000780)) r17 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r17) read$FUSE(r17, &(0x7f000000c400)={0x2020}, 0x2020) 2.208668013s ago: executing program 0 (id=639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000003f00000000000100000008000100400000000c000200700f0000ff8c00000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 2.049564307s ago: executing program 0 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x44}, [], [], 'ip6gretap0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000004c0)={{0xa, 0x8}, 0x100, './file0\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000000000000019f5"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x2002, @remote}, 0x10) ioctl$sock_SIOCOUTQNSD(r6, 0x8905, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x3}, {0x109}]}, 0x10) r7 = dup(r4) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newqdisc={0x24}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x3}]}}}]}, 0x40}}, 0x0) preadv(r13, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r12, @ANYBLOB="ebff09001e60f58220fe2d79bcaa56f515bf485880fe3d89f10a5bb306986a169488a6cfbfeade8f07aa2f457159c45c1ebd1bb16b90548636b86dd6b4d31f2f64119ab6c1de7bb69fc54b380021243f82be397dea793fad4624b74f62b9e47f49edc65a500e382ef0b7cf0ed9f329cc815000cf35c57609eb912080373e7b86404440e9292cd60ce9441ff82e1d4a0f44506c25b81d9e20302ff99f2a4808dd087abb2f56f9829483e523df", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0002a8bd7000fcdbdf250800000008000600", @ANYRES32=r12, @ANYBLOB="050029000000000008002b008000000008003a00070000000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140012006e2d1c1d885f8e251e6297bf657464657673696d3000000000000008001c0005000000"], 0x34}}, 0x810) ioctl$CDROM_SEND_PACKET(r7, 0x5393, &(0x7f0000000440)={"b2f136e5aa021cacdc7edf40", &(0x7f0000000380)="19f71ef265e1f1431a5f9a5e5290aba8b63ca8b956e0b65e753423dbe41b0392de24c3a8b6ccfbf8917ee4b1753c4fda4e7f800f1b4cd439d309bc422d", 0x3d, 0x4, &(0x7f00000003c0)={0x50, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, "0737c8b7", 0x8, "9f2fe09f", 0x6, 0xd, 0x0, '?\x00A', "d785f3f1f8fbb4d2a672068167397994916544563e0a431daf839277fb06d69c5a86cc18eb8d5c36b8e00450bd1a"}, 0x3, 0x2f48, 0x0, &(0x7f0000000400)}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.839119073s ago: executing program 4 (id=649): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x7}, &(0x7f00000000c0)=0x8) (async) r3 = accept(r0, 0x0, &(0x7f0000000100)) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) (async) recvfrom(r0, &(0x7f0000000180)=""/57, 0x39, 0x161, &(0x7f00000001c0)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={r2, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000002c0)={r1, 0x1}, 0x8) (async) ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000300)={0x7f, 0x2, 0x8, 0x5, 0x0, 0x3}) (async) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f0000000340)={0x0, 0x4, 0x6, 0x7f, 0x1, 0xb}) (async) r5 = signalfd(r0, &(0x7f0000000dc0)={[0x6]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000e00)={0x80000001, r4, 0x12, {0xf9a, 0xd}, 0xff}, 0x1) (async) syz_open_dev$midi(&(0x7f0000000e40), 0xb26, 0x490800) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000e80)={r1, 0x1}, &(0x7f0000000ec0)=0x8) poll(&(0x7f0000000f00)=[{r4, 0x2000}, {r3, 0x10}], 0x2, 0x2) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r5, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000f40)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x55, 0x0, @fd_index=0x6, 0xf99b, 0x0, 0x0, 0x1, 0x1, {0x2, r9}}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000f80)={0x80, 0xca5, 0x8007, 0x6, 0x8, 0x0, 0x6, 0x3, r6}, &(0x7f0000000fc0)=0x20) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000001000)={0x800, 0xa19, 0x6f55b3c2}, 0xc) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001080)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000001180)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {r12, 0xee01}}, './file0\x00'}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) (async) ioctl(r4, 0x4, &(0x7f0000001200)="01b165e3c35e7e72e5bccf2e05427a4d5e367f5828b64aff7e1e2a3c55ac8cc7fc0ae6e398f9a0") (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000012c0)={0xa30000, 0x0, 0x800, r4, 0x0, &(0x7f0000001280)={0xa2092a, 0x7cd7, '\x00', @p_u16=&(0x7f0000001240)=0x4}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001400)={r10, 0xdc, &(0x7f0000001300)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e22, 0x3ff, @private2, 0x3}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x3}, @in6={0xa, 0x4e24, 0xfff, @local, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x2, @remote, 0x5}]}, &(0x7f0000001440)=0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000001480)={0x0, 0x1, r5}) 1.836548108s ago: executing program 4 (id=650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) msgget(0x1, 0x741) msgget(0x2, 0x624) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)={0x3b}, 0x8) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) 1.18782045s ago: executing program 0 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeef0000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff}, {0x19, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7f}, {}, {0x0, 0x65, 0xff}, {0x0, 0x0, 0x2c}, {}, {0x0, 0x33, 0xfa}, {0x2, 0x9}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x4, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000380)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r8 = landlock_create_ruleset(&(0x7f0000000040)={0xd00}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) preadv(r7, &(0x7f00000003c0), 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3a0, 0xe8, 0xe8, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}, {[0xff]}}, {@mac=@random="9b27262b8f8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffffbd) memfd_create(&(0x7f0000000000)='J$]m\x8a\x00', 0x0) 1.100101288s ago: executing program 0 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000017719497000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2c}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xed, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'pim6reg0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r12, 0x1, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 1.099881077s ago: executing program 6 (id=660): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000005001100fe000000"], 0x18}], 0x1, 0x0, 0x0, 0x8800}, 0x4000) 1.039766579s ago: executing program 6 (id=661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write(r2, &(0x7f00000000c0), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r6, 0x0, 0x0, 0x4040044) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x1000000}, 0x0) 1.039302121s ago: executing program 6 (id=662): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f0000000080)=0x900}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 959.386401ms ago: executing program 4 (id=663): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000061104c000000000063000000000000009500000c00000000078c0b38844424df14d02f1efc9f3f2d9e577c50ed25fb56227f023ad97fec0b7a30402c99346fb25d96a63e6afa11cb056cd13caac4fdd8793f297ba82cdad66c31231d5eca845525fd191cd40bfdef4a7bd2158c6ec16b16152162ef2d3c6c19d85ed9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x48, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='bond0\x00', 0x10) (async) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_emit_ethernet(0x1016, &(0x7f0000000600)={@random="684e413feb7b", @random="0c3447bda60e", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "ff", "510432", 0x3, "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"}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xcf, 0x8a7, 0x208, 0xed8]}) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0) 959.101034ms ago: executing program 6 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="4c00010019c0000024001280110001006272696279655f736c617665000000000c00058005001b0009c914ca87a3575c95b318051eb2e5256d95340bd1bb01694734dd5c3da8441f36751e37ea0a12926504bbda537a73fdcb625a2f64181a13ef7908419a28333ea5b3e6fb8384935686e18cb5edd28a70a44417ac53fa11dfc6c00e140a6c7c1fe5505c96873766138564712140fa2e15d2e2bb054e16a79b22da415edbac5681213017fd953a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x2) (async) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 957.806785ms ago: executing program 4 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x23, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x1a4, 0x30, 0x200, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x190, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0x15c, 0x1a, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x21, 0x0, 0x2, 0x8000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1ff, 0x7, 0x7fff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x4, 0x6}}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}]}, {0xc4, 0x6, "40ef791033fe28f784806d131cf87e410ffc8c3c9e96db62c88ce2bc445f8c90ea1fc3d6a1d342639e5df5bda055fc1eb4f871202d85522a800fd8dfc5f16d455a7b035e682849a828809f5963ce0015f292c7d9a2b3e83e907d8d31de8cb7a51709ce8d7761c78f5c59df7f434a89d35633dfbbeb26f6b21688a322a400433520814a58a4beef9e25ae9d15580a57541c5152db1a32f5e74f7bb77e013614527d5da402b53ea138a115f9dd3c968e63e36b8dafa47c19b2472c933e42d06d5e"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x100084c4}, 0x0) 899.643729ms ago: executing program 0 (id=666): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r4 = dup(r3) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x2000) fallocate(r4, 0x3, 0x0, 0x180000000004) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) setresuid(0x0, 0x0, 0xee00) r7 = syz_usbip_server_init(0x2) r8 = accept4$nfc_llcp(r6, &(0x7f0000000200), &(0x7f0000000500)=0x60, 0x80000) r9 = syz_clone(0x20000000, &(0x7f0000019840)="9cc3799ae8b3b70e816ee59e3601e8bb7a81dc4b5ba38a007932ab49d86d912c257df34383f3d302877995ebfffd8f24f033abc4d917283a3f824f09529dbc0741fc781039a2e0a97ddd86cadee00de8654e51dd442512c56069d325f303b5fbb5f347304b5e3e882b02c45ce60db6aeea2775323dac01ece877b123c22ffc7c4b72df118ff01d18833f0666d12f6874cdff54fdacba8ec19ef7f1e4ccb2b46439dce268baa274be92249ed74bbd8453ed5247867eb5ac5de33d78dae503da52cf97bcd46970633480a9b3dfdf5510e5a5275fba34a388330a8d044f4069b2cd0454ae82bdded2d66cd9d858b6bbedbd187b39478aa7a563", 0xf8, &(0x7f0000000540), &(0x7f0000019940), &(0x7f0000019980)="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") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000019a80)={0x0, 0x0}, &(0x7f0000019ac0)=0xc) stat(&(0x7f0000019b00)='.\x00', &(0x7f0000019b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpgrp(0xffffffffffffffff) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f000001b280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a2608c9529e8b9f9e5dcd0756aeae3dccd0e09c74b983d8c3c46e33162d68d835ad6373030bf5ead3ec9c0c90de10eb9142280000000000000009cce8c861a95f5456efe0960bf0786e21ed9533be02ad333a47abadf03d64dcc88f3dd85ea315dbb1147c76fe23742ddca11e21798db9b95eb563c5ebd29b56e500efb127b93477389fe85a51f22709d49b6efdaf302487696eb8b06e7cda0b667ebe9f6a308fcb856886c8193d2e00214d052f9f96137d2001e7afd3abb39baa2b6631b2cb5fc1b87cdefee0432394b3db5cece1e"]) read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x10000, {0x1, 0x3, 0x2, 0xc21, 0x4, 0xf, {0x4, 0x0, 0x3, 0x7, 0x1, 0x7, 0xf62a, 0xaa, 0x3, 0x2000, 0x5, r13, r14, 0x4, 0xa6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000019dc0)={0x80240000, &(0x7f0000019bc0), &(0x7f0000019c00), &(0x7f0000019c40), {0x3f}, &(0x7f0000000100)=""/41, 0x29, &(0x7f000001a0c0)=""/144, &(0x7f0000019d80), 0x0, {r4}}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000019e40)={0x80000000, 0x4, {0xffffffffffffffff}, {}, 0x6b094b6f}) statx(r4, &(0x7f0000019e80)='./file0\x00', 0x4a00, 0x800, &(0x7f0000019ec0)) sendmsg$netlink(r0, &(0x7f000001a080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)={0xdc, 0x20, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="b3a333660d6fd74cfde1b4ed4dab04b583e2d5dbe8080b4f41f6be84fdeeacd05799809896cd8b8714ef035f82c5b851134c90ca2f9ae4ddb4200a3137ae6799f1bb0470a57b68044aa44296b4a9bfb442ba4c6aa30593aa493f9d47e586760d7c3c92d3c8371aa13bd09bc6cb03dd1cca27afd9c27bc479af87020f12199f7ab030ea19d9b4400c964f240019681531126fae3da40fff3766781a5c1fca8b531a48b6717336177eeed43f73acb34105ab34db1f5d866d380d2f6fa5", @typed={0x8, 0xd2, 0x0, 0x0, @pid=r15}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0xdc}, {&(0x7f000001a180)={0x128, 0x36, 0x8, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x88, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x124, 0x0, 0x0, @pid=r15}, @nested={0x107, 0xc8, 0x0, 0x1, [@typed={0x12, 0xb1, 0x0, 0x0, @binary="529c82f16e8a3ad9e28f86f586c0"}, @generic="d2e40a9df1b52825ba5302856d5affb35cd73e78d8752eb0b463a6a873884013a565fc3e3277e419e452f6eae07b1c913ac9003c9bf56e2b164b379aee1479579a5b79b806adee9123ec6ebd413bafdaa4d24d890b2630c95742faef667eb419d78f32d9373f29f0b89bd08c3e59445795870cd40f953a45117a20666785da6433c9f2d363cea1f09c008d1c8801098f6e6dc9ccf983c753f4df712d3fdd28612555362467c74110f0cb957e7ba6fcf0ad2386eee928ad29350c5a8601aa3c3127105af2567042305f2237852f05d71e63e2bda36af2f8c871e67bd760f5de0452dc90ce37fbd0830c1486", @nested={0x4, 0x13a}]}]}, 0x128}, {&(0x7f000001b3c0)=ANY=[@ANYRESDEC=r13], 0x1084}, {&(0x7f0000000440)={0x9c, 0x1b, 0x400, 0x70bd26, 0x25dfdbfe, "", [@generic="bd949cc86365b5a573a447840caf68a13969bd2f0eb7de271b025cb865a4230be2585e8fb0fc17bf95b83721c64593093bc038d162658a2cbeb02a778963c8c3e163d8573ef4aeb261418ba7596025fb2ab7fb428e8c3c9cc0065c218a957c65f601c7356d53ca50fabdc6a2db3500be6a00520609c2b3e71ae2779ed5fb292baa7d0a717b7cb3a86c1e"]}, 0x9c}], 0x4, &(0x7f0000019fc0)=[@rights={{0x1c, 0x1, 0x1, [r7, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r8, r4, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r7, r5]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0xa0, 0x4004000}, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 899.449503ms ago: executing program 6 (id=667): r0 = fanotify_init(0x200, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44884}, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup(r5) fanotify_mark(r0, 0x1, 0x48001059, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 899.186756ms ago: executing program 4 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x3f8, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xdb}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x3a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "7aed4d196ef55ba9585eb80efec2d03729185f1777da8335e54a90e93f1ef9d56aed7b1bcab93604c3794a2bad552349a0490f7bf849be2f1b73f2e1a72a6f930b8f023da086654e259a2c6db6b5747f3a548bb4122cbcc4e56abb1cec6d81b9cd459bfa9765cb98c624a262a2169493fe503bdfc15d731bc18e3205a656da826a65990ed16edd6926da5d49d88c3257c5d754b3d3537ee3368fe6f73ad94fd27bdeb746d6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_BITS={0x244, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'l\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x150, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x143, 0x2, 'L\xad\xd63~n\xca\xd0\xaa/\xbf$\xb7\x00\x18\x9b\xfe}\xe4x\xdf\rN\x8a\xa5>w\xa5%\xc2\xe40\xd6=\xa3-J\xa8\xb4@o\xe2\"\xbc\xc3cT\x1e\x94F\x9b\xbd\x1f\xd1\xf3;Z\xc0s\x17\x1f\xf4y\xa2\x95A/\x05\x82\xce9\xab\x8d\vc\xa3N\x9b\xcc\xf7\xad\xcb$m\xbc\xa9Q\xef\x8e\xb4\xe4\xad\xd2\x17\xda\xb2\x1f\xc2\xc8\xb1\xc9\xb5FY\xb5K\xdckU\xb4\x87\xa8\xb5vF\x89q\xcc~\x99\xa5\xfeK\xdds\xc8&\x90\xda\xe3\xe8\xb1\xa5.s{L\vm\xb9\x97\xe5\xad\xe0}\x9f\x1d\xc3\x02\xa0\xa2\xad\x99\xbb!\x97*\x13Ev)vy\x9d&\xa7\xc0b]\xd83\x98\x0em*S\b\x82\xbc\xe3w<\x87\xdd\xca\x97\x87R\xb1\xabG\x8fF%\x9a\tM\x0f\xa50\x0f4\x12\x91\xf1<\xa8\xe0\xd2\xa3\xae\x04CC\x9a\"\x9c\x96mj\x06\xb3lLD\xa7\xe9!\xe4\xc2/\xd7\x11\x02\xbb\xb1\xe1%\xee\xbf\x8e\xacf\xc5\x8b\x92h%\xb07 \xd4a\x9br\x92\x85\xe8\xec\x7fY\xbbZ\x91\x175\x8a\x85b\xbb\xa7\xc9\xf7\x94--\xbe\x86\x15\xd5_\xf3=.\x1b\xff\xab\xe9\x9dqY\xb3>\xbd|\x9b\xde\x87\xff?\xd4:\xf2,y\xcc\x15$q\xc1-\x1ai&r\"\x11\x1ab'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xffffffffffffff22, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ct\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(]*-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*-!.\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "3ec04e2b52f99cbd47360e65718838d5b7207ce4dd66f099256a45bdab9079b92cfb8be600f6ac8e6b3f5b63cc89f1d1"}, @ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "aa807f63c258fd3fc62c7276fb4403907412d4b7ba6745327b89cecfd0fffad760c435b3e10c4012f5b70edcb5f850d01b5750065612454353581eec8ad855abf777cb55509c6ffaa18fe65dfcb784e1866ae1ede436b9c8428785dd5c1476bb8c130158ac2f62232a96"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x30}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x2400a005}, 0x4000000) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000001}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) 898.891017ms ago: executing program 4 (id=669): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="f3460fc775c1f3450f09b9640b0000b800000080ba000000000f30440f01cb670fc7990098000067430f01c80fc734930f07c4a17e2c54260166baf80c470fc73eef66bafc0c670f01c4ef", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_disconnect(r0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_usb_disconnect(r4) (async) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @local, 0x0, 0x1, [@local]}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={0x3, @bcast, r9}) (async) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={0x3, @bcast, r9}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x40, 0x1a, 0x3, "b78a80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x40, 0x1a, 0x3, "b78a80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1, 0x2, 0x0) 809.52931ms ago: executing program 6 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x3ff, 0x50200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0xc, &(0x7f0000000100)={0x20, 0x0, 0x2, {0x2, 0x1}}, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000102c0)={0x19, 0x8, &(0x7f0000001480)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2) listen(0xffffffffffffffff, 0x101) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000010380)=ANY=[@ANYBLOB="b114ceb61e191655bc25b0bedbeb68353ac8ca2480b08cdcccb7bb00942533a818b93b9e864a40a8c21367c51ebdc6bc79d989313043a901ec822bacea65b72bfb183c949c857fc656adf83e0c3ee34428ff158b2c77a1a7567cca417905fb203afa7c14f6d55d8b17b3c40544002c870e130676", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf258600000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0xffffffffffffffad, 0x1, 0x8001}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6c}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x8f, 0xc5, "ecb5061ae5fad0c1c21ed58c1002ecbce73821b290feeed6764794d3738109b59483c7f4b370e6e0f244b73112eb1579e70fc182aa7d9790e00ef2c5d031d5432f4d0e0d6cf020150b1869192e607fcf3fd481246801a14e036eab142edc6d18babd8709e939617a94340a8ff02c2e103787034513f519ba2fdeaf88284cb6087769940e69bfa361742103"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xc3, 0xc5, "2c30f2219b4831debfcf156cef37c5f4160c75cf2ff191d61ccbdd9f645835005ece8d7cea295b4949b7223d3443f0deaaac44555b96f29b11c5ea5c4aeab55de3d201e3ff92342406168b91f6faf8d06af05dd9082d0de286fba8d56e9a5279cc19e1f22bec3ff758f37a8c52f674967f9e330f92b4906231b6b07ed4dc6dd1f612b32b349ad0bb89c12e6c72a679bccf038b6b265940651d8369072de3bf8bec0d46be3f51adeb4125e56021fafec8dba0959120e4722c46135d1001ffca"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xc72}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) r9 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r9, 0x40305829, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 329.996094ms ago: executing program 5 (id=672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write(r2, &(0x7f00000000c0), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r6, 0x0, 0x0, 0x4040044) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x100000000000000}, 0x0) 329.614988ms ago: executing program 5 (id=673): r0 = open(&(0x7f0000000080)='./bus\x00', 0x3e1c42, 0x1e3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x4, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=[0x8], 0x0, 0x4}) fcntl$notify(r0, 0x402, 0x3d) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500080001040000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYBLOB="0300006001000000030000e001020000d54e1b60da706da1"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r3 = inotify_init1(0x0) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f0000000100)) inotify_add_watch(r3, &(0x7f0000000140)='.\x00', 0x40000022) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r4, 0x4b4a, &(0x7f0000000000)) 240.328887ms ago: executing program 5 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000013c0)=0x2, 0x4) (async) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}}, 0x0) (async) socket$isdn(0x22, 0x2, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 240.108201ms ago: executing program 5 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="05001d0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) 228.010196ms ago: executing program 5 (id=676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r1) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000140)={&(0x7f0000000080)=""/75, 0x4b}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x0) io_setup(0xbc, &(0x7f0000000280)=0x0) io_submit(r8, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$unix(0x1, 0x5, 0x0) (async) dup2(r3, r1) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000140)={&(0x7f0000000080)=""/75, 0x4b}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r6, r0, 0x0) (async) io_setup(0xbc, &(0x7f0000000280)) (async) io_submit(r8, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) (async) 0s ago: executing program 5 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10002, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000040)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b8882800000f23c80f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb97b0b00000f323ed3db", 0x64}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r6, 0x121, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x1e}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r9, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) r10 = socket(0xa, 0x5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r11, 0x800454cf, 0x800000000000000) getsockopt$bt_BT_SECURITY(r10, 0x29, 0x21, 0x0, 0x20000000) setsockopt$MRT6_TABLE(r10, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) r12 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000030400000000fcffff0c01000400", @ANYRES32=0x0, @ANYBLOB="6104010000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x44004) kernel console output (not intermixed with test programs): [ 46.409606][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.412226][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.415751][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.418322][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.421052][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.424186][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.427760][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.430058][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.432215][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.434580][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.445885][ T5943] Bluetooth: hci0: command tx timeout [ 46.455937][ T5943] Bluetooth: hci1: command tx timeout [ 46.458177][ T5940] Bluetooth: hci2: command tx timeout [ 46.468692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.470998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.491630][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.500347][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.525340][ T5943] Bluetooth: hci3: command tx timeout [ 46.536227][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.539110][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.546339][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.548331][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.618089][ T6017] Zero length message leads to an empty skb [ 46.625883][ T9] IPVS: starting estimator thread 0... [ 46.663523][ T6029] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 46.690798][ T76] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 46.694049][ T6033] veth0_macvtap: left promiscuous mode [ 46.724970][ T6021] IPVS: using max 38 ests per chain, 91200 per kthread [ 46.736277][ T6043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6043 comm=syz.0.14 [ 46.739798][ T6043] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 46.740571][ T6044] raw_sendmsg: syz.2.13 forgot to set AF_INET. Fix it! [ 47.467361][ T62] IPVS: starting estimator thread 0... [ 47.512211][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 47.538657][ T6074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.564820][ T6065] IPVS: using max 37 ests per chain, 88800 per kthread [ 47.580761][ T6076] Cannot find map_set index 0 as target [ 47.595744][ T6081] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.25'. [ 47.598255][ T6081] netlink: zone id is out of range [ 47.604161][ T6081] netlink: zone id is out of range [ 47.606127][ T6081] netlink: zone id is out of range [ 47.607551][ T6081] netlink: get zone limit has 8 unknown bytes [ 47.623913][ T6083] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 47.653328][ T6085] mkiss: ax0: crc mode is auto. [ 47.665321][ T6071] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 47.805947][ T6101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 47.850133][ T6107] (syz.1.36,6107,2):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 47.900252][ T6109] kvm: pic: non byte read [ 47.924508][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.054597][ T9] usb 8-1: device descriptor read/64, error -71 [ 48.074433][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.226363][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.229133][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.231531][ T62] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.235044][ T62] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.237263][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.240856][ T62] usb 7-1: config 0 descriptor?? [ 48.294402][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 48.424443][ T9] usb 8-1: device descriptor read/64, error -71 [ 48.525042][ T5943] Bluetooth: hci2: command tx timeout [ 48.525068][ T5938] Bluetooth: hci1: command tx timeout [ 48.526522][ T5940] Bluetooth: hci0: command tx timeout [ 48.535122][ T9] usb usb8-port1: attempt power cycle [ 48.604469][ T5940] Bluetooth: hci3: command tx timeout [ 48.648258][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.650287][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.652532][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.656173][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.658177][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.660161][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.662100][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.664109][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.666122][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.668069][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.670065][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.672028][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.673970][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.676084][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.677987][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.679945][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.681865][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.683724][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.685640][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.687577][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.689477][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.691373][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.693244][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.695214][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.697092][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.699286][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.701175][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.703042][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.705043][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.706924][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.708760][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.710637][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.712607][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.714793][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.716694][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.718643][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.720509][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.722397][ T62] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.724775][ T62] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 48.730820][ T62] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.774501][ T5979] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 48.874520][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 48.894843][ T9] usb 8-1: device descriptor read/8, error -71 [ 48.910199][ T62] usb 7-1: USB disconnect, device number 2 [ 48.935995][ T5979] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 48.938586][ T5979] usb 5-1: config 1 interface 0 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 48.941911][ T5979] usb 5-1: config 1 interface 0 has no altsetting 0 [ 48.946281][ T5979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 48.948959][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.951007][ T5979] usb 5-1: Product: syz [ 48.952179][ T5979] usb 5-1: Manufacturer: syz [ 48.953369][ T5979] usb 5-1: SerialNumber: syz [ 49.134511][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 49.155678][ T9] usb 8-1: device descriptor read/8, error -71 [ 49.161283][ T6120] warning: `syz.0.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.170293][ T39] kauditd_printk_skb: 107 callbacks suppressed [ 49.170339][ T39] audit: type=1400 audit(1733631146.856:222): avc: denied { create } for pid=6119 comm="syz.0.40" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.177491][ T39] audit: type=1400 audit(1733631146.866:223): avc: denied { map } for pid=6119 comm="syz.0.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.183702][ T39] audit: type=1400 audit(1733631146.866:224): avc: denied { read write } for pid=6119 comm="syz.0.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.252413][ T5979] usb 5-1: USB disconnect, device number 2 [ 49.265025][ T9] usb usb8-port1: unable to enumerate USB device [ 49.443978][ T39] audit: type=1400 audit(1733631147.126:225): avc: denied { execute } for pid=6123 comm="syz.2.41" path="/14/cpu.stat" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.455811][ T6124] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.41'. [ 49.458611][ T39] audit: type=1400 audit(1733631147.146:226): avc: denied { mounton } for pid=6123 comm="syz.2.41" path="/14/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 49.550744][ T39] audit: type=1400 audit(1733631147.236:227): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.582387][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 49.680144][ T6131] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 49.682821][ T39] audit: type=1400 audit(1733631147.366:228): avc: denied { setopt } for pid=6130 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.688959][ T6131] syzkaller1: entered promiscuous mode [ 49.691152][ T6131] syzkaller1: entered allmulticast mode [ 49.878612][ T39] audit: type=1400 audit(1733631147.566:229): avc: denied { name_bind } for pid=6137 comm="syz.1.46" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.887916][ T39] audit: type=1400 audit(1733631147.566:230): avc: denied { node_bind } for pid=6137 comm="syz.1.46" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.907526][ T39] audit: type=1400 audit(1733631147.596:231): avc: denied { create } for pid=6139 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.986006][ T6147] process 'syz.1.49' launched './file1' with NULL argv: empty string added [ 50.056274][ T6157] sp0: Synchronizing with TNC [ 50.065662][ T6156] [U] [ 50.091018][ T6158] xt_l2tp: missing protocol rule (udp|l2tpip) [ 50.136562][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 50.281937][ T25] IPVS: starting estimator thread 0... [ 50.361582][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.365874][ T6180] IPVS: using max 37 ests per chain, 88800 per kthread [ 50.371409][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.373239][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.434611][ T6207] syz.1.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.602188][ T6213] kvm: kvm [6212]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f) [ 50.604988][ T5940] Bluetooth: hci1: command tx timeout [ 50.605008][ T5938] Bluetooth: hci0: command tx timeout [ 50.614481][ T5938] Bluetooth: hci2: command tx timeout [ 50.635116][ T831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.685621][ T5938] Bluetooth: hci3: command tx timeout [ 50.743419][ T6222] xt_socket: unknown flags 0x8 [ 50.784623][ T831] usb 7-1: Using ep0 maxpacket: 32 [ 50.787218][ T831] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 50.796009][ T831] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 50.798413][ T831] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 50.800814][ T831] usb 7-1: Product: syz [ 50.801888][ T831] usb 7-1: Manufacturer: syz [ 50.803073][ T831] usb 7-1: SerialNumber: syz [ 50.806045][ T831] usb 7-1: config 0 descriptor?? [ 50.809366][ T6205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 50.810545][ T6227] netlink: 576 bytes leftover after parsing attributes in process `syz.1.76'. [ 50.931874][ T1239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.983475][ T1239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.016474][ T6205] netlink: 80 bytes leftover after parsing attributes in process `syz.2.66'. [ 51.062284][ T1239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.086196][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.090579][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.093147][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.096648][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.099566][ T5940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.101517][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.137475][ T1239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.179364][ T6242] chnl_net:caif_netlink_parms(): no params data found [ 51.210218][ T6250] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 51.213518][ T6250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.257903][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.260168][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.262609][ T6242] bridge_slave_0: entered allmulticast mode [ 51.265405][ T6242] bridge_slave_0: entered promiscuous mode [ 51.274607][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.276602][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.278783][ T6242] bridge_slave_1: entered allmulticast mode [ 51.281201][ T6242] bridge_slave_1: entered promiscuous mode [ 51.320425][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.327866][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.331545][ T6262] kvm: pic: non byte write [ 51.370053][ T6242] team0: Port device team_slave_0 added [ 51.376384][ T1239] bridge_slave_1: left allmulticast mode [ 51.377921][ T1239] bridge_slave_1: left promiscuous mode [ 51.380564][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.386943][ T1239] bridge_slave_0: left allmulticast mode [ 51.389016][ T1239] bridge_slave_0: left promiscuous mode [ 51.390677][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.664640][ T1239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.669415][ T1239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.672588][ T1239] bond0 (unregistering): Released all slaves [ 51.678657][ T6242] team0: Port device team_slave_1 added [ 51.709190][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.711775][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.720702][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.727068][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.729407][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.739452][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.764473][ T1018] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 51.770848][ T6242] hsr_slave_0: entered promiscuous mode [ 51.773109][ T6242] hsr_slave_1: entered promiscuous mode [ 51.776740][ T6242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.779441][ T6242] Cannot create hsr debugfs directory [ 51.926690][ T1018] usb 6-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0x43, changing to 0x3 [ 51.930054][ T1018] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x3 has an invalid bInterval 105, changing to 4 [ 51.933029][ T6242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.933423][ T1018] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x3 has invalid maxpacket 34372, setting to 1023 [ 51.940519][ T1018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 51.941761][ T6242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.944539][ T1018] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 51.947033][ T1018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.949222][ T1018] usb 6-1: Product: syz [ 51.950675][ T1018] usb 6-1: Manufacturer: syz [ 51.952230][ T1018] usb 6-1: SerialNumber: syz [ 51.952240][ T6242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.958597][ T1018] usb 6-1: config 0 descriptor?? [ 51.959207][ T6242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.963410][ T1018] appledisplay 6-1:0.0: Could not find int-in endpoint [ 51.967179][ T1018] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 51.984440][ T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.987315][ T1239] hsr_slave_0: left promiscuous mode [ 51.989677][ T1239] hsr_slave_1: left promiscuous mode [ 51.991741][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.993812][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.000921][ T1239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.003057][ T1239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.019165][ T1239] veth1_macvtap: left promiscuous mode [ 52.020913][ T1239] veth0_macvtap: left promiscuous mode [ 52.022492][ T1239] veth1_vlan: left promiscuous mode [ 52.023993][ T1239] veth0_vlan: left promiscuous mode [ 52.154657][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 52.160195][ T62] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 52.164206][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.171418][ T62] usb 5-1: config 0 descriptor?? [ 52.185808][ T62] as10x_usb: device has been detected [ 52.189754][ T62] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 52.248942][ T62] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 52.317225][ T9] usb 6-1: USB disconnect, device number 2 [ 52.326080][ T62] as10x_usb: error during firmware upload part1 [ 52.331166][ T62] Registered device nBox DVB-T Dongle [ 52.618521][ T1239] team0 (unregistering): Port device team_slave_1 removed [ 52.671553][ T1239] team0 (unregistering): Port device team_slave_0 removed [ 52.685806][ T5938] Bluetooth: hci1: command tx timeout [ 52.694534][ T5938] Bluetooth: hci2: command tx timeout [ 52.765201][ T5938] Bluetooth: hci3: command tx timeout [ 52.878050][ T6289] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 52.941504][ T6294] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 53.166434][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.172847][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.175501][ T5938] Bluetooth: hci0: command tx timeout [ 53.184941][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.187236][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.198116][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.200385][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.285328][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.316393][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.414649][ T9] usb 7-1: USB disconnect, device number 3 [ 53.422758][ T6242] veth0_vlan: entered promiscuous mode [ 53.432681][ T6242] veth1_vlan: entered promiscuous mode [ 53.434637][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 53.436420][ T25] usb 6-1: no configurations [ 53.437631][ T25] usb 6-1: can't read configurations, error -22 [ 53.449089][ T6242] veth0_macvtap: entered promiscuous mode [ 53.451836][ T6242] veth1_macvtap: entered promiscuous mode [ 53.459233][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.461971][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.466012][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.468640][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.471166][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.473800][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.477263][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.481840][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.487118][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.490293][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.493779][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.498599][ T6242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.501479][ T6242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.505081][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.510466][ T6326] netlink: 'syz.2.92': attribute type 27 has an invalid length. [ 53.511465][ T6242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.515394][ T6242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.517717][ T6242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.520028][ T6242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.557540][ T6326] bond0: (slave bond_slave_0): Releasing backup interface [ 53.564642][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 53.628335][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.630357][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.642969][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.645349][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.670535][ T6333] netlink: 52 bytes leftover after parsing attributes in process `syz.2.93'. [ 53.714469][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 53.719191][ T25] usb 6-1: no configurations [ 53.723449][ T25] usb 6-1: can't read configurations, error -22 [ 53.726566][ T25] usb usb6-port1: attempt power cycle [ 53.756748][ T6343] gtp0: entered promiscuous mode [ 53.758075][ T6343] gtp0: entered allmulticast mode [ 54.002044][ T6363] netlink: 'syz.4.96': attribute type 29 has an invalid length. [ 54.006377][ T6363] netlink: 'syz.4.96': attribute type 29 has an invalid length. [ 54.017322][ T6363] netlink: 588 bytes leftover after parsing attributes in process `syz.4.96'. [ 54.021737][ T6363] unsupported nla_type 40 [ 54.029270][ T6363] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 54.064422][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 54.072438][ T6368] overlayfs: failed to resolve './file1': -2 [ 54.085017][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 54.086938][ T25] usb 6-1: no configurations [ 54.088490][ T25] usb 6-1: can't read configurations, error -22 [ 54.110780][ T6374] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 54.190680][ T62] usb 5-1: USB disconnect, device number 3 [ 54.213138][ T62] Unregistered device nBox DVB-T Dongle [ 54.214266][ T62] as10x_usb: device has been disconnected [ 54.214706][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 54.234887][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 54.236952][ T25] usb 6-1: no configurations [ 54.238203][ T25] usb 6-1: can't read configurations, error -22 [ 54.240056][ T25] usb usb6-port1: unable to enumerate USB device [ 54.373736][ T39] kauditd_printk_skb: 79 callbacks suppressed [ 54.373753][ T39] audit: type=1400 audit(1733631152.056:311): avc: denied { setopt } for pid=6379 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.522831][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.100'. [ 54.525269][ T6384] netlink: 'syz.4.100': attribute type 7 has an invalid length. [ 54.527082][ T6384] netlink: 'syz.4.100': attribute type 8 has an invalid length. [ 54.528855][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 54.579730][ T39] audit: type=1400 audit(1733631152.266:312): avc: denied { setopt } for pid=6383 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.582447][ T6387] tmpfs: Unknown parameter 'dnt_ae' [ 54.586477][ T39] audit: type=1400 audit(1733631152.266:313): avc: denied { write } for pid=6383 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.594042][ T39] audit: type=1400 audit(1733631152.276:314): avc: denied { create } for pid=6388 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.601429][ T39] audit: type=1400 audit(1733631152.276:315): avc: denied { write } for pid=6388 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.626839][ T39] audit: type=1400 audit(1733631152.316:316): avc: denied { append } for pid=6390 comm="syz.2.102" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.693586][ T39] audit: type=1400 audit(1733631152.376:317): avc: denied { ioctl } for pid=6395 comm="syz.4.104" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.752091][ T6402] syzkaller0: entered promiscuous mode [ 54.753565][ T6402] syzkaller0: entered allmulticast mode [ 54.843352][ T39] audit: type=1400 audit(1733631152.526:318): avc: denied { relabelfrom } for pid=6401 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.848982][ T39] audit: type=1400 audit(1733631152.526:319): avc: denied { relabelto } for pid=6401 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.852095][ T6404] syzkaller0: create flow: hash 289229523 index 1 [ 54.920695][ T39] audit: type=1400 audit(1733631152.606:320): avc: denied { connect } for pid=6427 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.958639][ T6431] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.111' sets config #938 [ 55.065555][ T6403] syzkaller0: delete flow: hash 289229523 index 1 [ 55.093401][ T6436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.099565][ T6436] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.119850][ T6436] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.139069][ T6436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.141427][ T6436] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.151470][ T6436] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.163160][ T6436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.165748][ T6436] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.176366][ T6436] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.187124][ T6436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.189254][ T6436] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.195096][ T6436] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.709504][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.712057][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.714614][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.717118][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.719585][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.722056][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.723817][ T6461] input: syz0 as /devices/virtual/input/input6 [ 55.724748][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.731569][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.734076][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736739][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736797][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736847][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736896][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736949][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.736998][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.737046][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.737094][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.737142][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.744495][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.749440][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.756617][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.760854][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.762648][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.762677][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.767053][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.768839][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.770659][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.772432][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.774220][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.776132][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.777904][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.779691][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 55.781473][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 56.116757][ T6469] vxcan1: tx address claim with dlc 1 [ 56.181742][ T6471] (syz.1.122,6471,2):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "usrquotadvmrp0" or missing value [ 56.186875][ T6471] (syz.1.122,6471,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 56.195330][ T6463] tc_dump_action: action bad kind [ 56.226937][ T6473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.123'. [ 56.230859][ T6473] tmpfs: Invalid uid '0x00000000ffffffff' [ 56.323924][ T6483] input: syz0 as /devices/virtual/input/input7 [ 56.328653][ T6483] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 56.332839][ T6483] Error validating options; rc = [-22] [ 56.388162][ T6495] fuse: Bad value for 'group_id' [ 56.389311][ T6497] overlayfs: overlapping lowerdir path [ 56.389794][ T6495] fuse: Bad value for 'group_id' [ 57.166077][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.166141][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.245538][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 57.369866][ T6526] overlayfs: failed to resolve './file0': -2 [ 57.385315][ T6528] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 57.388158][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 57.391830][ T6528] ipvlan1: entered promiscuous mode [ 57.393884][ T6528] ipvlan1: entered allmulticast mode [ 57.397781][ T6528] veth0_vlan: entered allmulticast mode [ 57.420440][ T6528] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 57.428566][ T6540] SELinux: syz.0.144 (6540) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.566541][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 57.609784][ T6565] Bluetooth: MGMT ver 1.23 [ 57.747371][ T1138] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x21 [ 57.773977][ T6577] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 57.777146][ T6578] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 57.867547][ T6578] macsec0: entered promiscuous mode [ 58.536037][ T6576] macsec0: left promiscuous mode [ 58.721790][ T6616] fuse: Bad value for 'rootmode' [ 58.737766][ T6618] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.811811][ T6620] nbd: couldn't find a device at index 127 [ 58.875018][ T6628] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.966274][ T1018] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 58.969819][ T6635] netlink: 116 bytes leftover after parsing attributes in process `syz.4.168'. [ 59.127278][ T1018] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.129948][ T1018] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.132293][ T1018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.135236][ T1018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.137746][ T1018] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.140109][ T1018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.144612][ T1018] hub 7-1:1.0: bad descriptor, ignoring hub [ 59.146263][ T1018] hub 7-1:1.0: probe with driver hub failed with error -5 [ 59.148399][ T1018] cdc_wdm 7-1:1.0: skipping garbage [ 59.149763][ T1018] cdc_wdm 7-1:1.0: skipping garbage [ 59.153418][ T1018] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 59.155079][ T1018] cdc_wdm 7-1:1.0: Unknown control protocol [ 59.234143][ T6648] Malformed UNC in devname [ 59.234143][ T6648] [ 59.236930][ T6648] CIFS: VFS: Malformed UNC in devname [ 59.244513][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.254447][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.324510][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 59.906829][ T6616] usb 7-1: reset low-speed USB device number 4 using dummy_hcd [ 59.973043][ T39] kauditd_printk_skb: 50 callbacks suppressed [ 59.973054][ T39] audit: type=1400 audit(1733631157.656:371): avc: denied { map } for pid=6659 comm="syz.4.174" path="/dev/cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.980891][ T39] audit: type=1400 audit(1733631157.656:372): avc: denied { execute } for pid=6659 comm="syz.4.174" path="/dev/cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.989338][ T39] audit: type=1400 audit(1733631157.676:373): avc: denied { setopt } for pid=6659 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.998800][ T39] audit: type=1400 audit(1733631157.686:374): avc: denied { getopt } for pid=6659 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.998880][ T6660] mmap: syz.4.174 (6660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.044035][ T39] audit: type=1400 audit(1733631157.726:375): avc: denied { ioctl } for pid=6661 comm="syz.4.175" path="socket:[13824]" dev="sockfs" ino=13824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.169237][ T39] audit: type=1400 audit(1733631157.856:376): avc: denied { name_bind } for pid=6666 comm="syz.1.176" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 60.206932][ T6616] usb 7-1: device firmware changed [ 60.210510][ T6616] cdc_wdm 7-1:1.0: Error autopm - -16 [ 60.210673][ T1018] usb 7-1: USB disconnect, device number 4 [ 60.231378][ T39] audit: type=1400 audit(1733631157.916:377): avc: denied { map } for pid=6670 comm="syz.4.177" path="socket:[12660]" dev="sockfs" ino=12660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 60.256648][ T39] audit: type=1400 audit(1733631157.946:378): avc: denied { connect } for pid=6670 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.344463][ T1018] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 60.497765][ T1018] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 60.500643][ T1018] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.503008][ T1018] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.507236][ T1018] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 60.509750][ T1018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.517710][ T1018] hub 7-1:1.0: bad descriptor, ignoring hub [ 60.519621][ T1018] hub 7-1:1.0: probe with driver hub failed with error -5 [ 60.521736][ T1018] cdc_wdm 7-1:1.0: skipping garbage [ 60.523280][ T1018] cdc_wdm 7-1:1.0: skipping garbage [ 60.524971][ T1018] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 60.596137][ T6683] netlink: 'syz.0.181': attribute type 10 has an invalid length. [ 60.600889][ T39] audit: type=1400 audit(1733631158.286:379): avc: denied { bind } for pid=6682 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.607426][ T39] audit: type=1400 audit(1733631158.286:380): avc: denied { name_bind } for pid=6682 comm="syz.0.181" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 60.649551][ T6688] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 60.653869][ T6688] cramfs: wrong magic [ 60.776595][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 60.824653][ T9] usb 7-1: USB disconnect, device number 5 [ 61.248922][ T6740] xt_limit: Overflow, try lower: 1207959552/384 [ 61.259120][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.299441][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 61.325121][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.334538][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.415390][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 61.502902][ T6758] team0: Device gtp0 is of different type [ 61.755427][ T6778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.827583][ T6780] openvswitch: netlink: EtherType 0 is less than min 600 [ 61.901708][ T6782] capability: warning: `syz.0.200' uses 32-bit capabilities (legacy support in use) [ 61.967864][ T6788] bond0: entered allmulticast mode [ 61.969278][ T6788] bond_slave_0: entered allmulticast mode [ 61.970786][ T6788] bond_slave_1: entered allmulticast mode [ 62.243778][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 62.397725][ T6831] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.211'. [ 63.144449][ T62] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.188076][ T6881] program syz.1.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.294434][ T62] usb 5-1: Using ep0 maxpacket: 8 [ 63.297520][ T62] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 63.300592][ T62] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.303620][ T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.306882][ T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.309760][ T62] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.320750][ T62] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.323396][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.325285][ T6888] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 63.328518][ T6888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 63.336290][ T6889] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 63.337614][ T6888] overlayfs: conflicting lowerdir path [ 63.494566][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 63.536187][ T62] usb 5-1: usb_control_msg returned -32 [ 63.537740][ T62] usbtmc 5-1:16.0: can't read capabilities [ 63.572122][ T6902] netlink: 'syz.1.233': attribute type 25 has an invalid length. [ 63.600286][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 63.713968][ T6911] fuse: blksize only supported for fuseblk [ 63.719040][ T6911] netlink: 80 bytes leftover after parsing attributes in process `syz.1.236'. [ 63.841629][ T6913] netlink: 140 bytes leftover after parsing attributes in process `syz.1.237'. [ 63.874691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.894536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.898553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.899275][ T6920] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 63.903874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.905378][ T6918] ======================================================= [ 63.905378][ T6918] WARNING: The mand mount option has been deprecated and [ 63.905378][ T6918] and is ignored by this kernel. Remove the mand [ 63.905378][ T6918] option from the mount to silence this warning. [ 63.905378][ T6918] ======================================================= [ 63.916071][ T6918] devtmpfs: Bad value for 'mpol' [ 63.917849][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 64.054544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.150852][ T6925] qnx4: no qnx4 filesystem (no root dir). [ 64.161496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.214650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.310639][ T6940] Bluetooth: MGMT ver 1.23 [ 64.364569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.367891][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 64.374874][ T6941] geneve3: entered promiscuous mode [ 64.376624][ T6941] geneve3: entered allmulticast mode [ 64.571018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.574447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.717727][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.720751][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.733703][ T6960] binder_alloc: 6959: binder_alloc_buf, no vma [ 64.931343][ T6986] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 65.088166][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 65.088177][ T39] audit: type=1400 audit(1733631162.776:423): avc: denied { map } for pid=7003 comm="syz.4.254" path="socket:[17482]" dev="sockfs" ino=17482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.098114][ T39] audit: type=1400 audit(1733631162.786:424): avc: denied { read } for pid=7003 comm="syz.4.254" path="socket:[17482]" dev="sockfs" ino=17482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.564459][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 65.681077][ T39] audit: type=1400 audit(1733631163.366:425): avc: denied { map } for pid=7018 comm="syz.1.256" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.689137][ T39] audit: type=1400 audit(1733631163.366:426): avc: denied { execute } for pid=7018 comm="syz.1.256" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.915071][ T5998] usb 5-1: USB disconnect, device number 4 [ 66.016244][ T7028] NILFS (loop0): device size too small [ 66.020089][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 66.047357][ T7030] netlink: 344 bytes leftover after parsing attributes in process `syz.1.260'. [ 66.923271][ T39] audit: type=1400 audit(2000000000.840:427): avc: denied { checkpoint_restore } for pid=7061 comm="syz.1.266" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.103522][ T7069] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 67.105853][ T7069] netlink: 232 bytes leftover after parsing attributes in process `syz.0.269'. [ 67.106589][ T7071] netlink: 'syz.0.269': attribute type 2 has an invalid length. [ 67.110232][ T7071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.269'. [ 67.136399][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 67.294342][ T5998] usb 9-1: Using ep0 maxpacket: 16 [ 67.296964][ T5998] usb 9-1: config 0 has no interfaces? [ 67.298430][ T5998] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.300851][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.305332][ T5998] usb 9-1: config 0 descriptor?? [ 67.373865][ T39] audit: type=1400 audit(2000000001.290:428): avc: denied { shutdown } for pid=7090 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.379197][ T39] audit: type=1400 audit(2000000001.300:429): avc: denied { read } for pid=7090 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.542893][ T39] audit: type=1400 audit(2000000001.460:430): avc: denied { getopt } for pid=7059 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.547627][ T7060] overlayfs: conflicting options: userxattr,verity=on [ 67.551738][ T5998] usb 9-1: USB disconnect, device number 2 [ 67.580130][ T7099] xt_l2tp: missing protocol rule (udp|l2tpip) [ 68.093602][ T39] audit: type=1400 audit(2000000002.010:431): avc: denied { name_bind } for pid=7109 comm="syz.4.280" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.837522][ T5940] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 68.860792][ T7117] netlink: 820 bytes leftover after parsing attributes in process `syz.1.282'. [ 68.863677][ T39] audit: type=1400 audit(2000000002.780:432): avc: denied { map } for pid=7116 comm="syz.1.282" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.082829][ T7132] xt_connbytes: Forcing CT accounting to be enabled [ 69.085123][ T7132] Cannot find add_set index 0 as target [ 69.129023][ T7134] overlayfs: cannot append lower layer [ 69.187528][ T7144] tipc: Can't bind to reserved service type 2 [ 69.288896][ T7150] misc userio: The device must be registered before sending interrupts [ 69.694236][ T6114] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 69.722659][ T7171] random: crng reseeded on system resumption [ 69.844270][ T6114] usb 9-1: Using ep0 maxpacket: 8 [ 69.850070][ T6114] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.853107][ T6114] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.855639][ T6114] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.862251][ T6114] usb 9-1: config 0 descriptor?? [ 70.069573][ T7178] netlink: 228 bytes leftover after parsing attributes in process `syz.0.301'. [ 70.075547][ T7178] CUSE: zero length info key specified [ 70.086817][ T6114] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 70.108903][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 70.108914][ T39] audit: type=1400 audit(2000000000.760:446): avc: denied { mount } for pid=7186 comm="syz.1.304" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.123833][ T39] audit: type=1400 audit(2000000000.770:447): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.359896][ T831] usb 9-1: USB disconnect, device number 3 [ 70.365577][ T39] audit: type=1400 audit(2000000001.020:448): avc: denied { write } for pid=7196 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.425826][ T39] audit: type=1400 audit(2000000001.080:449): avc: denied { read } for pid=7196 comm="syz.1.306" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 70.431384][ T39] audit: type=1400 audit(2000000001.080:450): avc: denied { open } for pid=7196 comm="syz.1.306" path="/95/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 70.437372][ T39] audit: type=1400 audit(2000000001.080:451): avc: denied { ioctl } for pid=7196 comm="syz.1.306" path="/95/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 70.952663][ T39] audit: type=1400 audit(2000000001.600:452): avc: denied { getopt } for pid=7213 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.009166][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.010974][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.329086][ T7214] syz.4.312 (7214): drop_caches: 2 [ 71.367182][ T39] audit: type=1400 audit(2000000002.020:453): avc: denied { sqpoll } for pid=7216 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.370135][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.313'. [ 71.372277][ T39] audit: type=1400 audit(2000000002.020:454): avc: denied { append } for pid=7216 comm="syz.4.313" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.449327][ T39] audit: type=1400 audit(2000000002.100:455): avc: denied { search } for pid=7223 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 syzkaller syzkaller login: [ 71.674681][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 71.678850][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 71.697053][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 71.703210][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 71.706206][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 71.719488][ T7231] kvm: kvm [7230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 72.117985][ T7245] dlm: non-version read from control device 147 [ 72.206901][ T7253] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 72.209966][ T7253] netlink: 3302 bytes leftover after parsing attributes in process `syz.1.322'. [ 72.222715][ T7253] Option ''MO' to dns_resolver key: bad/missing value [ 72.541289][ T7266] xt_hashlimit: size too large, truncated to 1048576 [ 72.845490][ T5940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.849217][ T5940] Bluetooth: hci2: Injecting HCI hardware error event [ 72.853070][ T5940] Bluetooth: hci2: hardware error 0x00 [ 73.004051][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.164623][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 73.167443][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 73.169577][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.172057][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.175407][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 52256, setting to 1024 [ 73.178307][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 73.180905][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.184906][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.187266][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.276089][ T7285] tipc: Started in network mode [ 73.277487][ T7285] tipc: Node identity 4, cluster identity 4711 [ 73.279159][ T7285] tipc: Node number set to 4 [ 73.397180][ T9] usb 6-1: usb_control_msg returned -32 [ 73.398686][ T9] usbtmc 6-1:16.0: can't read capabilities [ 73.752269][ T7272] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 73.954144][ T1018] usb 6-1: USB disconnect, device number 7 [ 74.120966][ T7292] xt_TCPMSS: Only works on TCP SYN packets [ 74.176185][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 74.500704][ T5938] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 74.924122][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.061440][ T7343] kAFS: Can only specify source 'none' with -o dyn [ 75.162009][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 75.162023][ T39] audit: type=1400 audit(2000000005.810:469): avc: denied { setattr } for pid=7349 comm="syz.0.351" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.173756][ T39] audit: type=1400 audit(2000000005.810:470): avc: denied { map } for pid=7349 comm="syz.0.351" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.180503][ T39] audit: type=1400 audit(2000000005.830:471): avc: denied { write } for pid=7355 comm="syz.4.353" name="net" dev="proc" ino=16224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.181652][ T39] audit: type=1400 audit(2000000005.830:472): avc: denied { add_name } for pid=7355 comm="syz.4.353" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.181684][ T39] audit: type=1400 audit(2000000005.830:473): avc: denied { create } for pid=7355 comm="syz.4.353" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 75.181710][ T39] audit: type=1400 audit(2000000005.830:474): avc: denied { associate } for pid=7355 comm="syz.4.353" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.182945][ T39] audit: type=1400 audit(2000000005.830:475): avc: denied { append } for pid=7355 comm="syz.4.353" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 75.398828][ T7369] netlink: 'syz.4.357': attribute type 23 has an invalid length. [ 75.482144][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 75.516644][ T39] audit: type=1400 audit(2000000006.170:476): avc: denied { ioctl } for pid=7370 comm="syz.4.358" path="socket:[16241]" dev="sockfs" ino=16241 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.738385][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 75.840143][ T7385] netlink: 52 bytes leftover after parsing attributes in process `syz.1.363'. [ 75.843491][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 75.846997][ T7385] tipc: MTU too low for tipc bearer [ 75.853850][ T62] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.003887][ T62] usb 9-1: Using ep0 maxpacket: 16 [ 76.007535][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.011315][ T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.014968][ T62] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.019354][ T62] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 76.022431][ T62] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.026003][ T62] usb 9-1: config 0 descriptor?? [ 76.032104][ T62] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 76.041118][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.048878][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.052112][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.056377][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.074977][ T5927] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.084106][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.087218][ T5338] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.126949][ T56] cfg80211: failed to load regulatory.db [ 76.204755][ T39] audit: type=1400 audit(2000000006.860:477): avc: denied { mount } for pid=7386 comm="syz.0.364" name="/" dev="ramfs" ino=16264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.219000][ T7387] overlay: ./file0 is not a directory [ 76.230415][ T7380] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 76.235347][ T62] usb 9-1: USB disconnect, device number 4 [ 76.499985][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.369'. [ 77.398767][ T7428] cgroup: Name too long [ 77.533043][ T7432] sctp: [Deprecated]: syz.1.376 (pid 7432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.533043][ T7432] Use struct sctp_sack_info instead [ 77.537713][ T39] audit: type=1400 audit(2000000008.200:478): avc: denied { getopt } for pid=7431 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.578365][ T7437] 9pnet_fd: Insufficient options for proto=fd [ 77.623397][ T7445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 77.696558][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 77.741427][ T7455] macvlan0: entered allmulticast mode [ 77.742942][ T7455] veth1_vlan: entered allmulticast mode [ 77.747409][ T7455] pim6reg: entered allmulticast mode [ 77.752441][ T7455] veth1_vlan: left allmulticast mode [ 77.762865][ T7455] macvlan0 (unregistering): left allmulticast mode [ 77.767143][ T7457] batman_adv: batadv0: Adding interface: dummy0 [ 77.768921][ T7457] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.775753][ T7457] batman_adv: batadv0: Interface activated: dummy0 [ 77.779958][ T7457] batadv0: mtu less than device minimum [ 77.782348][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.786723][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.791330][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.796169][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.800140][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.801541][ T7463] netlink: 592 bytes leftover after parsing attributes in process `syz.1.383'. [ 77.803571][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.808807][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.812397][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.815877][ T7457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.974333][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 78.123780][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 78.126540][ T8] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.128721][ T8] usb 9-1: config 0 has no interface number 0 [ 78.130353][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.133177][ T8] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 78.137813][ T8] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.140726][ T8] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.144502][ T8] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.146902][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.149834][ T8] usb 9-1: config 0 descriptor?? [ 78.155191][ T8] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 78.372029][ T8] usb 9-1: USB disconnect, device number 5 [ 78.382806][ T8] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 78.405031][ T7477] evm: overlay not supported [ 78.879960][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 78.882429][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 78.939660][ T7491] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 78.975207][ T7496] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.057474][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 79.115294][ T7510] netlink: 'syz.0.399': attribute type 7 has an invalid length. [ 79.117327][ T7510] netlink: 'syz.0.399': attribute type 8 has an invalid length. [ 79.211221][ T7515] program syz.0.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.255569][ T7512] hsr_slave_1 (unregistering): left promiscuous mode [ 79.457459][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.460490][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.462974][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.465563][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.467760][ T5938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.470048][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.628269][ T7547] kvm: user requested TSC rate below hardware speed [ 79.634353][ T7534] chnl_net:caif_netlink_parms(): no params data found [ 79.683434][ T7562] SELinux: policydb string length 14080 does not match expected length 8 [ 79.686557][ T7562] SELinux: failed to load policy [ 79.713003][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.715063][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.716943][ T7534] bridge_slave_0: entered allmulticast mode [ 79.719077][ T7534] bridge_slave_0: entered promiscuous mode [ 79.721574][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.724455][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.727261][ T7534] bridge_slave_1: entered allmulticast mode [ 79.729907][ T7534] bridge_slave_1: entered promiscuous mode [ 79.775621][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.783448][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.822035][ T7534] team0: Port device team_slave_0 added [ 79.825816][ T7534] team0: Port device team_slave_1 added [ 79.861330][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.863513][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.871840][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.879892][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.882250][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.891889][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.914642][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.962249][ T7534] hsr_slave_0: entered promiscuous mode [ 79.966111][ T7534] hsr_slave_1: entered promiscuous mode [ 79.981475][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.043838][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.108462][ T7534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.113170][ T7534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.119233][ T7534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.123120][ T7534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.143256][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.152429][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.154422][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.156395][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.158275][ T7534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.182714][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.193838][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.197747][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.208891][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.217283][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.219882][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.236063][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.238074][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.260459][ T1144] bridge_slave_1: left allmulticast mode [ 80.261954][ T1144] bridge_slave_1: left promiscuous mode [ 80.263492][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.267499][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.521323][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.527554][ T1144] bond0 (unregistering): Released all slaves [ 80.539618][ T7577] __nla_validate_parse: 5 callbacks suppressed [ 80.539630][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.418'. [ 80.558979][ T7534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.668071][ T7534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.695949][ T7604] syzkaller0: entered promiscuous mode [ 80.697434][ T7604] syzkaller0: entered allmulticast mode [ 80.699894][ T7604] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 80.776247][ T7615] virtiofs: Unknown parameter 'usrquota' [ 80.817368][ T7534] veth0_vlan: entered promiscuous mode [ 80.821496][ T7534] veth1_vlan: entered promiscuous mode [ 80.829096][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 80.829105][ T39] audit: type=1400 audit(2000000011.480:493): avc: denied { ioctl } for pid=7625 comm="syz.0.427" path="socket:[20310]" dev="sockfs" ino=20310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 80.835276][ T7534] veth0_macvtap: entered promiscuous mode [ 80.843209][ T7534] veth1_macvtap: entered promiscuous mode [ 80.850309][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.854729][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.857498][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.860347][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.863081][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.866307][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.868843][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.871544][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.877487][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.880838][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.884889][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.887450][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.890136][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.892769][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.895613][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.898141][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.900835][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.904589][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.910454][ T7534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912731][ T7534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.915748][ T7534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.918733][ T7534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.948441][ T1144] hsr_slave_0: left promiscuous mode [ 80.954867][ T1144] hsr_slave_1: left promiscuous mode [ 80.966273][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.968149][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.974912][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.977667][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.997641][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 81.004490][ T1144] veth1_macvtap: left promiscuous mode [ 81.007733][ T1144] veth1_vlan: left promiscuous mode [ 81.009968][ T1144] veth0_vlan: left promiscuous mode [ 81.030340][ T7644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7644 comm=syz.1.431 [ 81.034178][ T7644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.431'. [ 81.203042][ T39] audit: type=1400 audit(2000000011.850:494): avc: denied { getopt } for pid=7648 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.233284][ T39] audit: type=1400 audit(2000000011.880:495): avc: denied { ioctl } for pid=7652 comm="syz.0.433" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.486336][ T5940] Bluetooth: hci4: command tx timeout [ 81.570077][ T39] audit: type=1400 audit(2000000012.220:496): avc: denied { create } for pid=7661 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 81.649231][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 81.732396][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 82.233646][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.236527][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.249128][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.251248][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.255423][ T39] audit: type=1400 audit(2000000012.910:497): avc: denied { map } for pid=7680 comm="syz.4.441" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.261908][ T39] audit: type=1400 audit(2000000012.910:498): avc: denied { execute } for pid=7680 comm="syz.4.441" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.340603][ T7694] program syz.4.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.351964][ T39] audit: type=1400 audit(2000000013.000:499): avc: denied { ioctl } for pid=7696 comm="syz.1.444" path="socket:[20442]" dev="sockfs" ino=20442 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.354069][ T7698] bridge_slave_0: invalid flags given to default FDB implementation [ 82.396525][ T7710] CIFS: iocharset name too long [ 82.504405][ T1144] IPVS: stop unused estimator thread 0... [ 82.509430][ T39] audit: type=1400 audit(2000000013.160:500): avc: denied { setopt } for pid=7719 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.519820][ T7689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.522497][ T7690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.564272][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 82.566618][ T7725] bridge_slAve_0: renamed from lo [ 82.571279][ T39] audit: type=1400 audit(2000000013.220:501): avc: denied { mounton } for pid=7724 comm="syz.1.450" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 82.578101][ T39] audit: type=1400 audit(2000000013.230:502): avc: denied { read } for pid=7726 comm="syz.4.451" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.579880][ T7727] program syz.4.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.705229][ T7732] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 82.913579][ T56] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 83.073423][ T56] usb 10-1: Using ep0 maxpacket: 16 [ 83.076309][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.080363][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.083646][ T56] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.087040][ T56] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 83.089452][ T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.093308][ T56] usb 10-1: config 0 descriptor?? [ 83.280139][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 83.383922][ T7746] fuse: Bad value for 'fd' [ 83.467647][ T7732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.469475][ T7732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.471143][ T7732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.472738][ T7732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.476134][ T7732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.485768][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.490001][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.493585][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.498229][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.501524][ T5938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.505739][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.557709][ T56] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 83.559556][ T56] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 83.561446][ T56] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 83.563253][ T56] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 83.566033][ T56] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 83.569734][ T56] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 83.578313][ T56] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 83.580953][ T56] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 83.617326][ T7735] chnl_net:caif_netlink_parms(): no params data found [ 83.679192][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.681162][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.683024][ T7735] bridge_slave_0: entered allmulticast mode [ 83.686084][ T7735] bridge_slave_0: entered promiscuous mode [ 83.690667][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.692462][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.694371][ T7735] bridge_slave_1: entered allmulticast mode [ 83.696492][ T7735] bridge_slave_1: entered promiscuous mode [ 83.722518][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.726577][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.757336][ T7745] random: crng reseeded on system resumption [ 83.767911][ T7735] team0: Port device team_slave_0 added [ 83.770745][ T7735] team0: Port device team_slave_1 added [ 83.791406][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.793254][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.800759][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.806623][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.808454][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.809725][ T5949] usb 10-1: USB disconnect, device number 2 [ 83.816491][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.817356][ T56] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 83.829944][ T56] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.840957][ T56] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.846607][ T56] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.849206][ T7772] kAFS: unparsable volume name [ 83.877523][ T7735] hsr_slave_0: entered promiscuous mode [ 83.878675][ T7772] overlay: Unknown parameter 'fowner<00000000000000016392' [ 83.881659][ T7735] hsr_slave_1: entered promiscuous mode [ 83.883723][ T7735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.885768][ T7735] Cannot create hsr debugfs directory [ 83.964144][ T7735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.967781][ T7735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.972012][ T7735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.977272][ T7735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.977507][ T7777] overlay: filesystem on ./bus not supported as upperdir [ 83.989084][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.991534][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.993956][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.996356][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.019026][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.028438][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.032411][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.046615][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.053946][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.055848][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.060455][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.063039][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.164561][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.276363][ T7735] veth0_vlan: entered promiscuous mode [ 84.280191][ T7735] veth1_vlan: entered promiscuous mode [ 84.291670][ T7735] veth0_macvtap: entered promiscuous mode [ 84.296248][ T7735] veth1_macvtap: entered promiscuous mode [ 84.302427][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.305363][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308008][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.310759][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.314604][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.317483][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.320111][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.322789][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.326200][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.331974][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.335702][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.338354][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.341108][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.343802][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.346585][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.349165][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.351905][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.355645][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.360073][ T7735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.362444][ T7735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.365491][ T7735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368489][ T7735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.405559][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.408497][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.419919][ T7793] syzkaller1: entered promiscuous mode [ 84.421787][ T7793] syzkaller1: entered allmulticast mode [ 84.427762][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.429359][ T7793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 84.430064][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.434858][ T7793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.441265][ T7793] vhci_hcd vhci_hcd.0: Device attached [ 84.445872][ T7794] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 84.451102][ T1239] vhci_hcd: stop threads [ 84.454155][ T1239] vhci_hcd: release socket [ 84.455874][ T1239] vhci_hcd: disconnect device [ 84.556421][ T7804] autofs4:pid:7804:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 84.672227][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.470'. [ 84.674623][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.470'. [ 84.678287][ T7809] gtp0: entered promiscuous mode [ 84.679576][ T7809] gtp0: entered allmulticast mode [ 84.757723][ T7818] 9pnet_virtio: no channels available for device syz [ 84.764993][ T7818] overlay: ./file1 is not a directory [ 84.843534][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.008632][ T7829] FAULT_INJECTION: forcing a failure. [ 85.008632][ T7829] name failslab, interval 1, probability 0, space 0, times 1 [ 85.013188][ T7829] CPU: 3 UID: 0 PID: 7829 Comm: syz.6.475 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 85.016931][ T7829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.020658][ T7829] Call Trace: [ 85.021803][ T7829] [ 85.022834][ T7829] dump_stack_lvl+0x16c/0x1f0 [ 85.024593][ T7829] should_fail_ex+0x497/0x5b0 [ 85.026329][ T7829] ? fs_reclaim_acquire+0xae/0x150 [ 85.028194][ T7829] should_failslab+0xc2/0x120 [ 85.029842][ T7829] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 85.031889][ T7829] ? __alloc_skb+0x2b1/0x380 [ 85.033486][ T7829] __alloc_skb+0x2b1/0x380 [ 85.035017][ T7829] ? __pfx___alloc_skb+0x10/0x10 [ 85.036713][ T7829] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 85.038788][ T7829] netlink_alloc_large_skb+0x69/0x130 [ 85.040583][ T7829] netlink_sendmsg+0x689/0xd70 [ 85.042430][ T7829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.044259][ T7829] ____sys_sendmsg+0xaaf/0xc90 [ 85.045937][ T7829] ? copy_msghdr_from_user+0x10b/0x160 [ 85.047890][ T7829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.049742][ T7829] ___sys_sendmsg+0x135/0x1e0 [ 85.051465][ T7829] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.053299][ T7829] ? __pfx_lock_release+0x10/0x10 [ 85.055213][ T7829] ? trace_lock_acquire+0x14e/0x1f0 [ 85.057231][ T7829] ? __fget_files+0x206/0x3a0 [ 85.058901][ T7829] __sys_sendmsg+0x16e/0x220 [ 85.060507][ T7829] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.062285][ T7829] do_syscall_64+0xcd/0x250 [ 85.063899][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.065898][ T7829] RIP: 0033:0x7f33c5b7fed9 [ 85.067485][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.074106][ T7829] RSP: 002b:00007f33c6960058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.077006][ T7829] RAX: ffffffffffffffda RBX: 00007f33c5d45fa0 RCX: 00007f33c5b7fed9 [ 85.079732][ T7829] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000009 [ 85.082428][ T7829] RBP: 00007f33c69600a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.085179][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.087531][ T7829] R13: 0000000000000000 R14: 00007f33c5d45fa0 R15: 00007ffcdcc2f658 [ 85.089586][ T7829] [ 85.155170][ T7839] netlink: 172 bytes leftover after parsing attributes in process `syz.6.479'. [ 85.316464][ T76] nci: nci_rx_work: unknown MT 0x1 [ 85.493478][ T5940] Bluetooth: hci4: command 0x040f tx timeout [ 85.495766][ T5940] Bluetooth: hci0: command 0x040f tx timeout [ 85.563335][ T5940] Bluetooth: hci2: command tx timeout [ 85.789363][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.487'. [ 85.798736][ T7869] gretap0: entered promiscuous mode [ 85.801102][ T7869] macvtap1: entered promiscuous mode [ 85.803144][ T7869] macvtap1: entered allmulticast mode [ 85.805262][ T7869] gretap0: entered allmulticast mode [ 86.137082][ T7876] binder: 7875:7876 ioctl c0306201 200002c0 returned -14 [ 86.279763][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 86.279774][ T39] audit: type=1400 audit(2000000016.930:530): avc: denied { write } for pid=7891 comm="syz.6.493" laddr=172.20.20.170 lport=39728 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.281956][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'. [ 86.290593][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.496'. [ 86.299000][ T7901] fuse: Bad value for 'group_id' [ 86.300347][ T7901] fuse: Bad value for 'group_id' [ 86.307366][ T5940] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 86.438919][ T7905] FAULT_INJECTION: forcing a failure. [ 86.438919][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.444539][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.5.498 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 86.447280][ T7905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.450085][ T7905] Call Trace: [ 86.450982][ T7905] [ 86.451771][ T7905] dump_stack_lvl+0x16c/0x1f0 [ 86.453030][ T7905] should_fail_ex+0x497/0x5b0 [ 86.454321][ T7905] _copy_from_iter+0x2a1/0x1560 [ 86.455601][ T7905] ? trace_lock_acquire+0x14e/0x1f0 [ 86.456974][ T7905] ? __alloc_skb+0x1fe/0x380 [ 86.458200][ T7905] ? __pfx__copy_from_iter+0x10/0x10 [ 86.459585][ T7905] ? __virt_addr_valid+0x1a4/0x590 [ 86.460938][ T7905] ? __virt_addr_valid+0x5e/0x590 [ 86.462273][ T7905] ? __phys_addr_symbol+0x30/0x80 [ 86.463598][ T7905] ? __check_object_size+0x488/0x710 [ 86.465221][ T7905] netlink_sendmsg+0x813/0xd70 [ 86.466507][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.467890][ T7905] ____sys_sendmsg+0xaaf/0xc90 [ 86.469162][ T7905] ? copy_msghdr_from_user+0x10b/0x160 [ 86.470611][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.472016][ T7905] ___sys_sendmsg+0x135/0x1e0 [ 86.473240][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.474632][ T7905] ? __pfx_lock_release+0x10/0x10 [ 86.475970][ T7905] ? trace_lock_acquire+0x14e/0x1f0 [ 86.477348][ T7905] ? __fget_files+0x206/0x3a0 [ 86.478607][ T7905] __sys_sendmsg+0x16e/0x220 [ 86.479836][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.481189][ T7905] do_syscall_64+0xcd/0x250 [ 86.482405][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.483989][ T7905] RIP: 0033:0x7fa447b7fed9 [ 86.485173][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.490229][ T7905] RSP: 002b:00007fa4459f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.492405][ T7905] RAX: ffffffffffffffda RBX: 00007fa447d45fa0 RCX: 00007fa447b7fed9 [ 86.494479][ T7905] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000009 [ 86.496551][ T7905] RBP: 00007fa4459f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.498623][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.500695][ T7905] R13: 0000000000000000 R14: 00007fa447d45fa0 R15: 00007ffefda6ca68 [ 86.502763][ T7905] [ 86.513384][ T6114] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.675474][ T6114] usb 5-1: config 0 has no interfaces? [ 86.679522][ T6114] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 86.683026][ T6114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.686060][ T6114] usb 5-1: Product: syz [ 86.687644][ T6114] usb 5-1: Manufacturer: syz [ 86.689497][ T6114] usb 5-1: SerialNumber: syz [ 86.692544][ T6114] usb 5-1: config 0 descriptor?? [ 86.821076][ T39] audit: type=1400 audit(2000000017.470:531): avc: denied { audit_read } for pid=7912 comm="syz.5.500" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.897791][ T39] audit: type=1400 audit(2000000017.550:532): avc: denied { write } for pid=7918 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.898296][ T7899] netlink: 188 bytes leftover after parsing attributes in process `syz.0.495'. [ 86.905824][ T39] audit: type=1400 audit(2000000017.560:533): avc: denied { create } for pid=7918 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.910582][ T6114] usb 5-1: USB disconnect, device number 5 [ 86.924168][ T39] audit: type=1400 audit(2000000017.580:534): avc: denied { sys_admin } for pid=7918 comm="syz.5.502" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 86.975661][ T7923] : renamed from bond0 (while UP) [ 86.987873][ T7923] hfsplus: unable to find HFS+ superblock [ 87.017433][ T7925] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.503'. [ 87.020352][ T7925] net_ratelimit: 11 callbacks suppressed [ 87.020359][ T7925] openvswitch: netlink: Flow actions attr not present in new flow. [ 87.112629][ T39] audit: type=1400 audit(2000000017.760:535): avc: denied { ioctl } for pid=7929 comm="syz.6.504" path="socket:[22486]" dev="sockfs" ino=22486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.308037][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 87.310336][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.506'. [ 87.312627][ T7942] netlink: 'syz.6.506': attribute type 20 has an invalid length. [ 87.441900][ T7951] netlink: 80 bytes leftover after parsing attributes in process `syz.6.509'. [ 87.539313][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.5.514'. [ 87.544809][ T39] audit: type=1400 audit(2000000018.201:536): avc: denied { mounton } for pid=7962 comm="syz.5.514" path="/proc/51/cgroup" dev="proc" ino=24582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.550806][ T39] audit: type=1400 audit(2000000018.201:537): avc: denied { remount } for pid=7962 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 87.563819][ T5940] Bluetooth: hci4: command 0x040f tx timeout [ 87.614650][ T7973] netlink: 'syz.0.519': attribute type 19 has an invalid length. [ 87.643371][ T5940] Bluetooth: hci2: command tx timeout [ 87.791756][ T7980] netlink: 'syz.5.522': attribute type 10 has an invalid length. [ 87.794596][ T7980] syz_tun: entered promiscuous mode [ 87.799121][ T7980] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.870469][ T39] audit: type=1400 audit(2000000018.521:538): avc: denied { bind } for pid=7993 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.876209][ T39] audit: type=1400 audit(2000000018.521:539): avc: denied { accept } for pid=7993 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.935437][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.5.527 [ 87.939293][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.5.527 [ 87.943006][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.5.527 [ 87.947047][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.5.527 [ 87.950717][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.5.527 [ 87.979696][ T8008] Falling back ldisc for ttyS3. [ 88.111893][ T8015] overlayfs: missing 'lowerdir' [ 88.567427][ T8034] Unsupported ieee802154 address type: 0 [ 88.569730][ T8035] ieee802154 phy1 wpan1: encryption failed: -22 [ 88.573764][ T8035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8035 comm=syz.6.535 [ 88.918333][ T5940] block nbd0: Receive control failed (result -32) [ 88.928902][ T8038] block nbd0: shutting down sockets [ 89.322354][ T8048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.538'. [ 89.385030][ T8049] futex_wake_op: syz.6.538 tries to shift op by -1; fix this program [ 89.645588][ T5940] Bluetooth: hci4: command 0x040f tx timeout [ 89.723731][ T5940] Bluetooth: hci2: command tx timeout [ 90.457488][ T8054] netlink: 'syz.6.540': attribute type 7 has an invalid length. [ 90.459546][ T8054] netlink: 'syz.6.540': attribute type 8 has an invalid length. [ 90.610454][ T8062] tmpfs: Unknown parameter 'Size' [ 90.612709][ T8062] netlink: 'syz.5.542': attribute type 10 has an invalid length. [ 90.615895][ T8062] geneve0: entered promiscuous mode [ 90.620005][ T8062] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 91.044373][ T8086] netlink: 'syz.6.549': attribute type 2 has an invalid length. [ 91.435241][ T8113] input: syz0 as /devices/virtual/input/input12 [ 91.523881][ T5949] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 91.653096][ T5949] usb 11-1: device descriptor read/64, error -71 [ 91.723062][ T5940] Bluetooth: hci4: command 0x040f tx timeout [ 91.731022][ T8120] __nla_validate_parse: 2 callbacks suppressed [ 91.731033][ T8120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.559'. [ 91.736651][ T8121] batadv0: entered promiscuous mode [ 91.738609][ T8121] team0: entered promiscuous mode [ 91.740001][ T8121] team_slave_0: entered promiscuous mode [ 91.741762][ T8121] team_slave_1: entered promiscuous mode [ 91.744531][ T8121] hsr1: entered promiscuous mode [ 91.745855][ T8121] hsr1: entered allmulticast mode [ 91.747182][ T8121] batadv0: entered allmulticast mode [ 91.748582][ T8121] team0: entered allmulticast mode [ 91.749923][ T8121] team_slave_0: entered allmulticast mode [ 91.751423][ T8121] team_slave_1: entered allmulticast mode [ 91.781018][ T8125] FAULT_INJECTION: forcing a failure. [ 91.781018][ T8125] name failslab, interval 1, probability 0, space 0, times 0 [ 91.784730][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: syz.0.560 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 91.787460][ T8125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.790271][ T8125] Call Trace: [ 91.791146][ T8125] [ 91.791928][ T8125] dump_stack_lvl+0x16c/0x1f0 [ 91.793193][ T8125] should_fail_ex+0x497/0x5b0 [ 91.794431][ T8125] should_failslab+0xc2/0x120 [ 91.795640][ T8125] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 91.797008][ T8125] ? skb_clone+0x190/0x3f0 [ 91.798150][ T8125] skb_clone+0x190/0x3f0 [ 91.799243][ T8125] netlink_deliver_tap+0xabd/0xd30 [ 91.800562][ T8125] netlink_unicast+0x6b4/0x7f0 [ 91.801802][ T8125] ? __pfx_netlink_unicast+0x10/0x10 [ 91.803152][ T8125] ? genl_rcv_msg+0x4bd/0x800 [ 91.804358][ T8125] netlink_ack+0x6ac/0xb80 [ 91.805530][ T8125] netlink_rcv_skb+0x348/0x440 [ 91.806753][ T8125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.808050][ T8125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.809385][ T8125] ? down_read+0xc9/0x330 [ 91.810525][ T8125] ? __pfx_down_read+0x10/0x10 [ 91.811773][ T8125] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.813139][ T8125] genl_rcv+0x28/0x40 [ 91.814212][ T8125] netlink_unicast+0x53c/0x7f0 [ 91.815458][ T8125] ? __pfx_netlink_unicast+0x10/0x10 [ 91.817104][ T8125] netlink_sendmsg+0x8b8/0xd70 [ 91.818722][ T8125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.820558][ T8125] ____sys_sendmsg+0xaaf/0xc90 [ 91.821821][ T8125] ? copy_msghdr_from_user+0x10b/0x160 [ 91.823268][ T8125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.824651][ T8125] ___sys_sendmsg+0x135/0x1e0 [ 91.825883][ T8125] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.827258][ T8125] ? __pfx_lock_release+0x10/0x10 [ 91.828591][ T8125] ? trace_lock_acquire+0x14e/0x1f0 [ 91.829955][ T8125] ? __fget_files+0x206/0x3a0 [ 91.831198][ T8125] __sys_sendmsg+0x16e/0x220 [ 91.832403][ T8125] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.833753][ T8125] do_syscall_64+0xcd/0x250 [ 91.834975][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.836526][ T8125] RIP: 0033:0x7f0c8e17fed9 [ 91.837697][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.842684][ T8125] RSP: 002b:00007f0c8ef5d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.843146][ T5940] Bluetooth: hci2: command tx timeout [ 91.844815][ T8125] RAX: ffffffffffffffda RBX: 00007f0c8e345fa0 RCX: 00007f0c8e17fed9 [ 91.844838][ T8125] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000009 [ 91.844845][ T8125] RBP: 00007f0c8ef5d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.844852][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.844859][ T8125] R13: 0000000000000000 R14: 00007f0c8e345fa0 R15: 00007ffe89660a78 [ 91.844873][ T8125] [ 91.857912][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.912997][ T5949] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 91.927489][ T8127] batman_adv: batadv0: Interface deactivated: dummy0 [ 91.929349][ T8127] batman_adv: batadv0: Removing interface: dummy0 [ 91.934583][ T8127] bridge_slave_0: left allmulticast mode [ 91.936357][ T8127] bridge_slave_0: left promiscuous mode [ 91.938054][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.941637][ T8127] bridge_slave_1: left allmulticast mode [ 91.943180][ T8127] bridge_slave_1: left promiscuous mode [ 91.944682][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.949063][ T8127] bond0: (slave bond_slave_0): Releasing backup interface [ 91.951203][ T8127] bond_slave_0: left allmulticast mode [ 91.956550][ T8127] bond0: (slave bond_slave_1): Releasing backup interface [ 91.958920][ T8127] bond_slave_1: left allmulticast mode [ 91.961325][ T8127] team_slave_0: left promiscuous mode [ 91.962799][ T8127] team_slave_0: left allmulticast mode [ 91.974395][ T8127] team0: Port device team_slave_0 removed [ 91.976829][ T8127] team_slave_1: left promiscuous mode [ 91.978506][ T8127] team_slave_1: left allmulticast mode [ 91.980688][ T8128] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 91.987020][ T8127] team0: Port device team_slave_1 removed [ 91.988960][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.990924][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.994051][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.996085][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.009211][ T8128] bond0: left allmulticast mode [ 92.011112][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.013730][ T8128] bond0: entered promiscuous mode [ 92.015606][ T8128] bond0: entered allmulticast mode [ 92.017201][ T8128] team0: Port device bond0 added [ 92.043391][ T5949] usb 11-1: device descriptor read/64, error -71 [ 92.153285][ T5949] usb usb11-port1: attempt power cycle [ 92.372966][ T56] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.381759][ T8137] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 92.383519][ T8137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.385664][ T8137] vhci_hcd vhci_hcd.0: Device attached [ 92.390855][ T8137] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 92.393099][ T8137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.396147][ T8137] vhci_hcd vhci_hcd.0: Device attached [ 92.402396][ T8137] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 92.404700][ T8137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.407703][ T8137] vhci_hcd vhci_hcd.0: Device attached [ 92.410948][ T8137] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 92.413306][ T8137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.416464][ T8137] vhci_hcd vhci_hcd.0: Device attached [ 92.418496][ T8142] vhci_hcd: connection closed [ 92.418512][ T8138] vhci_hcd: connection closed [ 92.421014][ T8140] vhci_hcd: connection closed [ 92.421049][ T1239] vhci_hcd: stop threads [ 92.425230][ T1239] vhci_hcd: release socket [ 92.426441][ T1239] vhci_hcd: disconnect device [ 92.427499][ T8144] vhci_hcd: connection closed [ 92.429429][ T1239] vhci_hcd: stop threads [ 92.431817][ T1239] vhci_hcd: release socket [ 92.433198][ T1239] vhci_hcd: disconnect device [ 92.434591][ T1239] vhci_hcd: stop threads [ 92.435726][ T1239] vhci_hcd: release socket [ 92.436895][ T1239] vhci_hcd: disconnect device [ 92.438467][ T1239] vhci_hcd: stop threads [ 92.439708][ T1239] vhci_hcd: release socket [ 92.440878][ T1239] vhci_hcd: disconnect device [ 92.503675][ T5949] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 92.523000][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 92.525151][ T5949] usb 11-1: device descriptor read/8, error -71 [ 92.527732][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.530377][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.533126][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.535905][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.539428][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.541959][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.746719][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 92.748236][ T56] usbtmc 5-1:16.0: can't read capabilities [ 92.773648][ T5949] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 92.803300][ T5949] usb 11-1: device descriptor read/8, error -71 [ 92.913775][ T5949] usb usb11-port1: unable to enumerate USB device [ 92.950325][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 92.950335][ T39] audit: type=1400 audit(2000000023.601:548): avc: denied { ioctl } for pid=8133 comm="syz.0.564" path="socket:[23401]" dev="sockfs" ino=23401 ioctlcmd=0x5b0a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.953393][ T9] usb 5-1: USB disconnect, device number 6 [ 93.097621][ T8158] netlink: 'syz.5.569': attribute type 1 has an invalid length. [ 93.108578][ T8158] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.110587][ T8158] UDF-fs: Scanning with blocksize 2048 failed [ 93.113177][ T8158] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.115077][ T8158] UDF-fs: Scanning with blocksize 4096 failed [ 93.179848][ T39] audit: type=1400 audit(2000000023.831:549): avc: denied { bind } for pid=8161 comm="syz.5.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.245930][ T39] audit: type=1400 audit(2000000023.901:550): avc: denied { read write } for pid=8165 comm="syz.5.573" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.253455][ T39] audit: type=1400 audit(2000000023.901:551): avc: denied { open } for pid=8165 comm="syz.5.573" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.306924][ T39] audit: type=1400 audit(2000000023.961:552): avc: denied { bind } for pid=8167 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.348556][ T8170] overlayfs: failed to resolve './bus': -2 [ 93.445027][ T8179] netlink: 'syz.4.578': attribute type 2 has an invalid length. [ 93.447297][ T8179] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 93.449567][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 93.501147][ T8185] syz.0.580: attempt to access beyond end of device [ 93.501147][ T8185] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 93.506103][ T8185] vxfs: unable to read disk superblock at 1 [ 93.507504][ T39] audit: type=1400 audit(2000000024.161:553): avc: denied { mount } for pid=8187 comm="syz.4.581" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.508012][ T8185] syz.0.580: attempt to access beyond end of device [ 93.508012][ T8185] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 93.518187][ T8185] vxfs: unable to read disk superblock at 8 [ 93.518331][ T8188] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 93.519773][ T8185] vxfs: can't find superblock. [ 93.521782][ T8188] netlink: 232 bytes leftover after parsing attributes in process `syz.4.581'. [ 93.528578][ T39] audit: type=1400 audit(2000000024.181:554): avc: denied { remount } for pid=8187 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.534231][ T8188] devpts: called with bogus options [ 93.552892][ T39] audit: type=1400 audit(2000000024.201:555): avc: denied { connect } for pid=8184 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.557307][ T8191] team0: entered allmulticast mode [ 93.559710][ T8191] team_slave_0: entered allmulticast mode [ 93.559822][ T39] audit: type=1400 audit(2000000024.211:556): avc: denied { unmount } for pid=6242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.561297][ T8191] team_slave_1: entered allmulticast mode [ 93.628623][ T39] audit: type=1400 audit(2000000024.281:557): avc: denied { view } for pid=8195 comm="syz.5.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.639505][ T8198] fuse: Bad value for 'group_id' [ 93.640910][ T8198] fuse: Bad value for 'group_id' [ 93.802900][ T5940] Bluetooth: hci4: command 0x040f tx timeout [ 94.082945][ T56] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.121758][ T8231] fuse: Bad value for 'fd' [ 94.243314][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 94.245948][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.249687][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.252317][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.256396][ T56] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 94.259519][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.262450][ T56] usb 5-1: config 0 descriptor?? [ 94.327397][ T8246] binder: 8243:8246 ioctl c0306201 20000580 returned -14 [ 94.389371][ T8250] vxfs: WRONG superblock magic 00000000 at 1 [ 94.393298][ T8250] vxfs: WRONG superblock magic 00000000 at 8 [ 94.395299][ T8250] vxfs: can't find superblock. [ 94.436410][ T8252] program syz.5.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.467286][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 94.480018][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.6.604'. [ 94.485535][ T8261] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 94.663512][ T8272] loop1: detected capacity change from 0 to 6 [ 94.667629][ T8272] Dev loop1: unable to read RDB block 6 [ 94.669123][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 94.669593][ T8272] loop1: unable to read partition table [ 94.671243][ T56] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.672696][ T8272] loop1: partition table beyond EOD, truncated [ 94.675725][ T56] usb 5-1: USB disconnect, device number 7 [ 94.677286][ T8272] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ [ 94.677286][ T8272] ) failed (rc=-5) [ 94.712967][ T6114] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 94.872814][ T6114] usb 9-1: Using ep0 maxpacket: 8 [ 94.876253][ T6114] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.879158][ T6114] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.881538][ T6114] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.884682][ T6114] usb 9-1: config 0 descriptor?? [ 95.091620][ T6114] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.224951][ T8276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53411 sclass=netlink_route_socket pid=8276 comm=syz.0.608 [ 95.295345][ T1018] usb 9-1: USB disconnect, device number 6 [ 95.334837][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 95.372156][ T8295] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 95.536310][ T8311] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 95.539428][ T8311] ufs: You didn't specify the type of your ufs filesystem [ 95.539428][ T8311] [ 95.539428][ T8311] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 95.539428][ T8311] [ 95.539428][ T8311] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 95.548826][ T8311] ufs: ufstype=old is supported read-only [ 95.550878][ T8311] ufs: ufs_fill_super(): bad magic number [ 95.577799][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 95.580170][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 95.583502][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 95.759911][ T8321] netlink: 'syz.0.623': attribute type 17 has an invalid length. [ 95.762431][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 96.508150][ T8339] 9pnet_fd: Insufficient options for proto=fd [ 96.510583][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.862443][ T8384] overlayfs: conflicting options: metacopy=off,verity=on [ 96.898644][ T8387] __nla_validate_parse: 5 callbacks suppressed [ 96.898661][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 96.992068][ T8396] xt_NFQUEUE: number of total queues is 0 [ 96.998708][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 97.060067][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 97.086940][ T8403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.171312][ T8412] tipc: Started in network mode [ 97.173210][ T8412] tipc: Node identity 4, cluster identity 4711 [ 97.175580][ T8412] tipc: Node number set to 4 [ 97.182191][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 97.341275][ T8421] netlink: 'syz.4.650': attribute type 2 has an invalid length. [ 97.344227][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.4.650'. [ 97.382127][ T8428] netlink: 100 bytes leftover after parsing attributes in process `syz.5.652'. [ 97.537273][ T8434] bond0: (slave syz_tun): Releasing backup interface [ 97.658536][ T8438] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0 [ 97.660658][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.915224][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 98.050336][ T8446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8446 comm=syz.0.659 [ 98.054101][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 98.054110][ T39] audit: type=1400 audit(2000000028.701:574): avc: denied { connect } for pid=8454 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.167897][ T39] audit: type=1400 audit(2000000028.821:575): avc: denied { lock } for pid=8469 comm="syz.4.668" path="socket:[24576]" dev="sockfs" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 98.244997][ T8480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 98.247230][ T8480] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.250479][ T8480] vhci_hcd vhci_hcd.0: Device attached [ 98.253157][ T39] audit: type=1400 audit(2000000028.911:576): avc: denied { accept } for pid=8466 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.269826][ T39] audit: type=1400 audit(2000000028.921:577): avc: denied { getopt } for pid=8466 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.426529][ T9] vhci_hcd: vhci_device speed not set [ 98.432699][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 98.482880][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 98.502628][ T56] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 98.607450][ T25] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.609749][ T25] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.612388][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.614817][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.617648][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.621551][ T25] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.624062][ T25] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.626243][ T25] usb 9-1: Product: syz [ 98.627411][ T25] usb 9-1: Manufacturer: syz [ 98.627482][ T39] audit: type=1400 audit(2000000029.281:578): avc: denied { write } for pid=8484 comm="syz.5.671" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.629810][ T5940] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 98.638529][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 98.639906][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 98.641963][ T25] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 98.643668][ T25] cdc_wdm 9-1:1.0: Unknown control protocol [ 98.672695][ T56] usb 11-1: Using ep0 maxpacket: 16 [ 98.676179][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.680151][ T56] usb 11-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 98.683850][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.688204][ T56] usb 11-1: config 0 descriptor?? [ 98.804928][ T39] audit: type=1400 audit(2000000029.461:579): avc: denied { setopt } for pid=8491 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.809514][ T39] audit: type=1400 audit(2000000029.461:580): avc: denied { create } for pid=8491 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.863153][ T8] usb 9-1: USB disconnect, device number 7 [ 98.983107][ T8481] vhci_hcd: connection reset by peer [ 98.984751][ T1138] vhci_hcd: stop threads [ 98.985947][ T1138] vhci_hcd: release socket [ 98.989377][ T1138] vhci_hcd: disconnect device [ 99.084285][ T8506] kvm: emulating exchange as write [ 99.096208][ T56] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 99.098144][ T56] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 99.100352][ T56] hid-steam 0003:28DE:1102.0004: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 99.130434][ T39] audit: type=1400 audit(2000000029.781:581): avc: denied { read } for pid=8505 comm="syz.5.677" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 99.176530][ T56] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 99.179900][ T56] input: Steam Controller as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:28DE:1102.0004/input/input13 [ 99.192081][ T56] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 99.194358][ T56] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 99.199307][ T56] hid-steam 0003:28DE:1102.0005: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 99.275157][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.278632][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.295687][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.298916][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.307640][ T8479] [ 99.308517][ T8479] ====================================================== [ 99.310849][ T8479] WARNING: possible circular locking dependency detected [ 99.313173][ T8479] 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 Not tainted [ 99.316735][ T8479] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.319330][ T8479] syz.6.670/8479 is trying to acquire lock: [ 99.321588][ T8479] ffff888050a342c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x24/0x450 [ 99.324989][ T8479] [ 99.324989][ T8479] but task is already holding lock: [ 99.327439][ T8479] ffff888049291e20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x25/0x170 [ 99.330534][ T8479] [ 99.330534][ T8479] which lock already depends on the new lock. [ 99.330534][ T8479] [ 99.334032][ T8479] [ 99.334032][ T8479] the existing dependency chain (in reverse order) is: [ 99.337305][ T8479] [ 99.337305][ T8479] -> #1 (&hdev->ll_open_lock){+.+.}-{4:4}: [ 99.340041][ T8479] __mutex_lock+0x19b/0xa60 [ 99.341774][ T8479] hid_hw_open+0x25/0x170 [ 99.343455][ T8479] input_open_device+0x22c/0x390 [ 99.345412][ T8479] evdev_open+0x52d/0x690 [ 99.347180][ T8479] chrdev_open+0x237/0x6a0 [ 99.348956][ T8479] do_dentry_open+0xf59/0x1ea0 [ 99.350852][ T8479] vfs_open+0x82/0x3f0 [ 99.352513][ T8479] path_openat+0x1e6a/0x2d60 [ 99.354212][ T8479] do_filp_open+0x20c/0x470 [ 99.355752][ T8479] do_sys_openat2+0x17a/0x1e0 [ 99.357328][ T8479] __x64_sys_openat+0x175/0x210 [ 99.358969][ T8479] do_syscall_64+0xcd/0x250 [ 99.360522][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.362488][ T8479] [ 99.362488][ T8479] -> #0 (&dev->mutex#2){+.+.}-{4:4}: [ 99.365014][ T8479] __lock_acquire+0x249e/0x3c40 [ 99.366675][ T8479] lock_acquire.part.0+0x11b/0x380 [ 99.368289][ T8479] __mutex_lock+0x19b/0xa60 [ 99.369754][ T8479] __input_unregister_device+0x24/0x450 [ 99.371588][ T8479] input_unregister_device+0xb9/0x100 [ 99.373385][ T8479] steam_input_unregister+0x10c/0x2c0 [ 99.375182][ T8479] steam_client_ll_open+0xc9/0x100 [ 99.376897][ T8479] hid_hw_open+0xe2/0x170 [ 99.378393][ T8479] hidraw_open+0x274/0x7e0 [ 99.379917][ T8479] chrdev_open+0x237/0x6a0 [ 99.381436][ T8479] do_dentry_open+0xf59/0x1ea0 [ 99.383067][ T8479] vfs_open+0x82/0x3f0 [ 99.384494][ T8479] path_openat+0x1e6a/0x2d60 [ 99.386086][ T8479] do_filp_open+0x20c/0x470 [ 99.387442][ T8479] do_sys_openat2+0x17a/0x1e0 [ 99.388817][ T8479] __x64_sys_openat+0x175/0x210 [ 99.390211][ T8479] do_syscall_64+0xcd/0x250 [ 99.391519][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.393180][ T8479] [ 99.393180][ T8479] other info that might help us debug this: [ 99.393180][ T8479] [ 99.395720][ T8479] Possible unsafe locking scenario: [ 99.395720][ T8479] [ 99.397547][ T8479] CPU0 CPU1 [ 99.398863][ T8479] ---- ---- [ 99.400202][ T8479] lock(&hdev->ll_open_lock); [ 99.401361][ T8479] lock(&dev->mutex#2); [ 99.403017][ T8479] lock(&hdev->ll_open_lock); [ 99.404839][ T8479] lock(&dev->mutex#2); [ 99.405881][ T8479] [ 99.405881][ T8479] *** DEADLOCK *** [ 99.405881][ T8479] [ 99.407872][ T8479] 2 locks held by syz.6.670/8479: [ 99.409160][ T8479] #0: ffffffff8fc3ce10 (minors_rwsem){+.+.}-{4:4}, at: hidraw_open+0xa6/0x7e0 [ 99.411402][ T8479] #1: ffff888049291e20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x25/0x170 [ 99.413744][ T8479] [ 99.413744][ T8479] stack backtrace: [ 99.415225][ T8479] CPU: 2 UID: 0 PID: 8479 Comm: syz.6.670 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 99.417810][ T8479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.420440][ T8479] Call Trace: [ 99.421319][ T8479] [ 99.422102][ T8479] dump_stack_lvl+0x116/0x1f0 [ 99.423331][ T8479] print_circular_bug+0x419/0x5d0 [ 99.424670][ T8479] check_noncircular+0x31a/0x400 [ 99.425966][ T8479] ? __pfx_check_noncircular+0x10/0x10 [ 99.427391][ T8479] ? __pfx_mark_lock+0x10/0x10 [ 99.428661][ T8479] ? lockdep_lock+0xc6/0x200 [ 99.429867][ T8479] ? __pfx_lockdep_lock+0x10/0x10 [ 99.431197][ T8479] ? save_trace+0x53/0xb60 [ 99.432365][ T8479] __lock_acquire+0x249e/0x3c40 [ 99.433637][ T8479] ? __pfx___lock_acquire+0x10/0x10 [ 99.435002][ T8479] ? find_held_lock+0x2d/0x110 [ 99.436254][ T8479] lock_acquire.part.0+0x11b/0x380 [ 99.437585][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.439073][ T8479] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 99.440525][ T8479] ? rcu_is_watching+0x12/0xc0 [ 99.441776][ T8479] ? trace_lock_acquire+0x14e/0x1f0 [ 99.443143][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.444615][ T8479] ? lock_acquire+0x2f/0xb0 [ 99.445800][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.447290][ T8479] __mutex_lock+0x19b/0xa60 [ 99.448490][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.449960][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.451441][ T8479] ? __pfx___mutex_lock+0x10/0x10 [ 99.452750][ T8479] ? synchronize_rcu_expedited+0x424/0x450 [ 99.454265][ T8479] ? __pfx_autoremove_wake_function+0x10/0x10 [ 99.455850][ T8479] ? __pfx_lock_release+0x10/0x10 [ 99.457157][ T8479] ? __input_unregister_device+0x24/0x450 [ 99.458637][ T8479] __input_unregister_device+0x24/0x450 [ 99.460067][ T8479] input_unregister_device+0xb9/0x100 [ 99.461413][ T8479] steam_input_unregister+0x10c/0x2c0 [ 99.462824][ T8479] steam_client_ll_open+0xc9/0x100 [ 99.464154][ T8479] hid_hw_open+0xe2/0x170 [ 99.465278][ T8479] hidraw_open+0x274/0x7e0 [ 99.466451][ T8479] ? __pfx_hidraw_open+0x10/0x10 [ 99.467749][ T8479] chrdev_open+0x237/0x6a0 [ 99.468933][ T8479] ? __pfx_chrdev_open+0x10/0x10 [ 99.470236][ T8479] do_dentry_open+0xf59/0x1ea0 [ 99.471490][ T8479] ? __pfx_chrdev_open+0x10/0x10 [ 99.472786][ T8479] vfs_open+0x82/0x3f0 [ 99.473859][ T8479] ? may_open+0x1f2/0x400 [ 99.474971][ T8479] path_openat+0x1e6a/0x2d60 [ 99.476121][ T8479] ? __pfx_path_openat+0x10/0x10 [ 99.477335][ T8479] ? __pfx___lock_acquire+0x10/0x10 [ 99.478626][ T8479] ? lock_acquire.part.0+0x11b/0x380 [ 99.479986][ T8479] ? find_held_lock+0x2d/0x110 [ 99.481205][ T8479] do_filp_open+0x20c/0x470 [ 99.482345][ T8479] ? __pfx_do_filp_open+0x10/0x10 [ 99.483606][ T8479] ? find_held_lock+0x2d/0x110 [ 99.484819][ T8479] ? alloc_fd+0x41f/0x760 [ 99.485922][ T8479] do_sys_openat2+0x17a/0x1e0 [ 99.487172][ T8479] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.488547][ T8479] ? fput+0x67/0x440 [ 99.489586][ T8479] ? __sys_sendmsg+0x19a/0x220 [ 99.490865][ T8479] __x64_sys_openat+0x175/0x210 [ 99.492141][ T8479] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.493545][ T8479] do_syscall_64+0xcd/0x250 [ 99.494793][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.496370][ T8479] RIP: 0033:0x7f33c5b7e840 [ 99.497542][ T8479] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 99.502505][ T8479] RSP: 002b:00007f33c695fb90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 99.504656][ T8479] RAX: ffffffffffffffda RBX: 000000000014a042 RCX: 00007f33c5b7e840 [ 99.506714][ T8479] RDX: 000000000014a042 RSI: 00007f33c695fc30 RDI: 00000000ffffff9c [ 99.508757][ T8479] RBP: 00007f33c695fc30 R08: 0000000000000000 R09: 0023776172646968 [ 99.510829][ T8479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.512529][ T6114] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 99.512870][ T8479] R13: 0000000000000000 R14: 00007f33c5d45fa0 R15: 00007ffcdcc2f658 [ 99.516981][ T8479] [ 99.783445][ T8479] input: Steam Controller as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:28DE:1102.0004/input/input14 [ 99.792679][ T25] usb 11-1: USB disconnect, device number 6 [ 99.804917][ T25] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 99.827879][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.924540][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.986660][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.075529][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.142586][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.194339][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.234881][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.274945][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.324137][ T11] bridge_slave_1: left allmulticast mode [ 100.326229][ T11] bridge_slave_1: left promiscuous mode [ 100.328352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.331756][ T11] bridge_slave_0: left allmulticast mode [ 100.334049][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.338069][ T11] bridge_slave_1: left allmulticast mode [ 100.340116][ T11] bridge_slave_1: left promiscuous mode [ 100.342315][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.345056][ T11] bridge_slave_0: left allmulticast mode [ 100.347058][ T11] bridge_slave_0: left promiscuous mode [ 100.349045][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.410329][ T11] gretap0 (unregistering): left allmulticast mode [ 100.437528][ T11] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 100.585590][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.588650][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.591300][ T11] bond0 (unregistering): Released all slaves [ 100.596870][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.599825][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.602667][ T11] bond0 (unregistering): Released all slaves [ 100.605732][ T11] bond1 (unregistering): Released all slaves [ 100.676265][ T11] tipc: Left network mode [ 101.046736][ T11] hsr_slave_0: left promiscuous mode [ 101.048388][ T11] hsr_slave_1: left promiscuous mode [ 101.049963][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.051911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.054236][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.056178][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.059948][ T11] hsr_slave_0: left promiscuous mode [ 101.062260][ T11] hsr_slave_1: left promiscuous mode [ 101.064827][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.067366][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.070259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.072981][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.078786][ T11] veth1_macvtap: left promiscuous mode [ 101.080719][ T11] veth0_macvtap: left promiscuous mode [ 101.082875][ T11] veth1_vlan: left promiscuous mode [ 101.084729][ T11] veth0_vlan: left promiscuous mode [ 101.087234][ T11] veth1_macvtap: left promiscuous mode [ 101.089139][ T11] veth0_macvtap: left promiscuous mode [ 101.091061][ T11] veth1_vlan: left promiscuous mode [ 101.092645][ T11] veth0_vlan: left promiscuous mode [ 101.278071][ T11] team_slave_1 (unregistering): left allmulticast mode [ 101.280186][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.314748][ T11] team_slave_0 (unregistering): left allmulticast mode [ 101.316848][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.465223][ T11] team0 (unregistering): left allmulticast mode [ 101.608563][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.643686][ T11] team0 (unregistering): Port device team_slave_0 removed [ 102.387388][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.444963][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.484827][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.525437][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.571941][ T11] bridge_slave_1: left allmulticast mode [ 102.573604][ T11] bridge_slave_1: left promiscuous mode [ 102.575236][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.577649][ T11] bridge_slave_0: left allmulticast mode [ 102.579215][ T11] bridge_slave_0: left promiscuous mode [ 102.580755][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.686891][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.690104][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.693960][ T11]  (unregistering): Released all slaves [ 102.751923][ T11] tipc: Left network mode [ 102.822774][ T11] IPVS: stopping backup sync thread 8261 ... [ 102.976244][ T11] hsr_slave_0: left promiscuous mode [ 102.978009][ T11] hsr_slave_1: left promiscuous mode [ 102.979728][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.981611][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.983912][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.985848][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.988850][ T11] veth1_macvtap: left promiscuous mode [ 102.990296][ T11] veth0_macvtap: left promiscuous mode [ 102.991719][ T11] veth1_vlan: left promiscuous mode [ 102.993237][ T11] veth0_vlan: left promiscuous mode [ 103.155465][ T11] team0 (unregistering): Port device team_slave_1 removed [ 103.191637][ T11] team0 (unregistering): Port device team_slave_0 removed [ 103.632321][ T9] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 04:13:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000100 RCX=0000000000000000 RDX=0000000000000f00 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90004c6f980 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b299db0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fa4459f66c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a600000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000049cd2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010000 0000000000030000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde171f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde171f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc90003bc0000 RDX=ffffc90003bbf801 RSI=ffffc90003bbf888 RDI=ffffc90003bbf888 RBP=ffffc90003bbf178 RSP=ffffc90003bbf0b8 R8 =ffffc90003bbf164 R9 =ffffffff90fe3be6 R10=ffffc90003bbf130 R11=000000000000e801 R12=ffffc90003bbf180 R13=ffffc90003bbf130 R14=ffffc90003bbf890 R15=ffffc90003bbf888 RIP=ffffffff81493500 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9840477d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f983f9106a3 00007f983f9106a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb83eab50 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557cae8222 000055557cae7ed0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557caebe91 000055557caeb990 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557cae5980 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc00000000040300 1000000034280807 8003078004168003 16800406a0030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0122808810000680 0401000000080606 0144c60280a00800 06e00300100006d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100006c00302 100006b003681000 1690038002000400 006576656e656700 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000b8012001400 0000000001046138 0807b00300080007 a803000400010cff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffc000000000403 0010000000342808 0780030780041680 0316800406a00300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ca0d5 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc900046bee48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000006e R14=ffffffff851ca070 R15=0000000000000000 RIP=ffffffff851ca0ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f33c69606c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36aa80 CR3=000000004816e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c695fc10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000031776172 6469682f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000012544251 474a4b0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ab52c RBX=0000000000000003 RCX=ffffffff8b29f759 RDX=ffffed100d526fee RSI=ffffffff8bd1b4e0 RDI=ffffffff817086b9 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f0f90 R15=0000000000000000 RIP=ffffffff8b2a0b3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fde1802af90 CR3=000000002b548000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdcc2f9e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33c5bf4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000