last executing test programs: 52.294531258s ago: executing program 0 (id=647): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x2010003, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="07010600a901001410cb5db1a0e7315b8d83614d00c10000000400000049010000b40000000000000000000000a8ffdc55ac03915e35af2345c08f3a04be9d6ea312edb375e832c679b6f5b672dac0d13a40e1d09a28ede4543600002f4f86c62f27086181fda198315e30f82f87d15ff08d9ec105ff91f07f48457701b688af4e74a8b4ee4d35bbea02ab149b0e4dc7e55432946d90adf0b716f5f655c4c2fdf52cba1d405f3ad386121b347aec1744b1b65ea11dc1095d9ba7b061311033a06dc4cef0be582e25eda80d2f163bae3b815bfd9ffb947601b9db476cac41f7abd3935a524fe8f9b005f976cadcf1c71246adac7f5de9bfcc2a8f28f51cba000000000000000052372502f2424a15dbeafc1425caf8f8dedb687c8a11f715e1e8163d05eb8f52eb8c56d42e4172cb80a6400fd85a1cce2e16b3bacd"], 0xe0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 51.388430039s ago: executing program 0 (id=661): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x14, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) connect$802154_dgram(r8, &(0x7f0000000200)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0496, 0x24200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 51.386953094s ago: executing program 0 (id=662): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000017c0)={&(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r2}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x20}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/59, 0x0, 0x1}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000b00)) r12 = dup(r11) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000000)={0x1, r12}) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f00000003c0)={0x1, r9}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r0, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8013}, 0x40) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 49.268707929s ago: executing program 0 (id=690): r0 = socket(0x2, 0x3, 0x6) r1 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="c753cc49", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="7c007a8014000200328e0b14fe124a089accc82e85dbe082240001003cc7dc02e1adb1144e1e9077062f96d80ecd7a98d3e48f37a670e3667800e1b3080004000500000008000400ff0100001c000200e4198e806831d881ad3c3931d65b51628eba10de964b5a7614000100ce9958ab31d73967e5c5cb947f3cf18804007a80"], 0x9c}, 0x1, 0x0, 0x0, 0x2000}, 0x10000) (async) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001f, 0xfa, 0x20000, {r3}}, 0x20) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async) io_uring_setup(0x34ee, &(0x7f0000000200)={0x0, 0x24e6, 0x400, 0x1, 0x2ba}) r4 = syz_io_uring_setup(0x2933, &(0x7f0000000080)={0x0, 0xaa93, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000280)={{r7}, 0x7fffffffffffffff, 0x6, 0x8}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0xa983d000) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 49.268527381s ago: executing program 0 (id=691): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e5c7f20eae1fae974c170f6484d0a76b00489afd264e961114174dd08e6a34da6c9cb5dcb0fcccd12f9b47b8ea086c1c1c593c15de9400"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x20044014) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async, rerun: 64) write(r7, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x3, 0x0, 0xae3}}) 49.167834055s ago: executing program 0 (id=692): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x402, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=virtio,access=user,']) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000b40)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="5001000000000000dffe15df83ba7111"], 0x150) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) close(0x4) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x84}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000004) 33.995303602s ago: executing program 32 (id=692): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x402, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=virtio,access=user,']) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000b40)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="5001000000000000dffe15df83ba7111"], 0x150) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) close(0x4) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x84}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000004) 4.227967895s ago: executing program 3 (id=1250): socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "d14c9d6385414ac71270b026eb5f5972479ef4898992879b7b9810b6934e925cc727af398000c8099c4344c911638051bda7bc87a663d069c6"}, 0x44) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 2.090262185s ago: executing program 2 (id=1266): r0 = io_uring_setup(0x2b34, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x7fff, 0x172d], 0x2) 2.083156512s ago: executing program 2 (id=1267): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r2, 0xa9ac}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f00000000c0)=0x8) listen(r0, 0x9) r4 = syz_io_uring_setup(0x407a, &(0x7f0000000180)={0x0, 0xa1d3, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x24, 0x6, r0, 0x0, 0x0, 0x0, 0x40010020, 0x1, {0x1}}) io_uring_enter(r4, 0x7a98, 0xd7aa, 0x0, 0x0, 0x0) 1.768437129s ago: executing program 4 (id=1270): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='9 \x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0020000000060002000000000006001b0000100000"], 0x3c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3a00) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') (async) chdir(&(0x7f0000000140)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@volatile={0x0, 0x0, 0x2, 0x2, 0x4}, @union={0xd, 0x2, 0x0, 0x5, 0x0, 0x4, [{0x3, 0x1, 0xfffffffb}, {0x4, 0x5, 0x4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x4}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@volatile={0x0, 0x0, 0x2, 0x2, 0x4}, @union={0xd, 0x2, 0x0, 0x5, 0x0, 0x4, [{0x3, 0x1, 0xfffffffb}, {0x4, 0x5, 0x4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x4}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x276, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x276, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000011c0), &(0x7f0000ff4000)) 1.689519779s ago: executing program 1 (id=1273): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) r2 = dup2(r1, r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048050}, 0x14) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa, 0x8003, 0x0, 0x4}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x48a}], 0x1, 0x9) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) read$usbfs(r7, &(0x7f00000002c0)=""/89, 0x59) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf251300000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) 1.480223019s ago: executing program 1 (id=1274): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x14}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0xee, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x160, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x0) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.479867043s ago: executing program 1 (id=1275): r0 = socket(0x23, 0x80805, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x5, 0x7, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000140)) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f042}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001cc0)={0x1, 'veth1_macvtap\x00'}, 0x18) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@local, 0x101}, 0x1, 0x2, 0x4}) (async, rerun: 32) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000002140)=0x30) (async) listen(r0, 0x0) (async) poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) 1.300039799s ago: executing program 4 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x3, 0x2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x700, 0x8000, 0x94d, 0x2}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.299348467s ago: executing program 1 (id=1277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.299122088s ago: executing program 1 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x80000000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 1.170031162s ago: executing program 2 (id=1279): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001480), 0x20100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0xffff1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.169786736s ago: executing program 3 (id=1280): r0 = io_uring_setup(0x2b32, &(0x7f0000000080)={0x0, 0x17a3, 0x80, 0x1, 0x337}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) 1.110715955s ago: executing program 3 (id=1281): socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.110525783s ago: executing program 3 (id=1282): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x42) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x10000, 0x0, [0x0, 0x7fffffffffffffff, 0x0, 0xb], [0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.110218358s ago: executing program 4 (id=1283): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x64, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x64}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000002780), 0x1, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x1, 0x3, 0x1, &(0x7f0000000000)={0x12, "2b749873cbcf2cd261e76fcb2e126fca0d886bdf0a00e89838aead0abb6b813186"}}) 1.060649873s ago: executing program 2 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x91}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040), 0x8) listen(r5, 0x0) fcntl$setstatus(r5, 0x4, 0x40c00) (async) r6 = dup2(r5, r5) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) 1.060146013s ago: executing program 4 (id=1285): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.054410437s ago: executing program 2 (id=1286): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x40db, 0x1ff, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x8, 0x800, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0x4, 0x8}) close_range(r0, r1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x1, 0x3}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="d1d4000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x0}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r12, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) 1.010609049s ago: executing program 3 (id=1287): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r2, 0xa9ac}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f00000000c0)=0x8) listen(r0, 0x9) r4 = syz_io_uring_setup(0x407a, &(0x7f0000000180)={0x0, 0xa1d3, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x24, 0x6, r0, 0x0, 0x0, 0x0, 0x40010020, 0x1, {0x1}}) io_uring_enter(r4, 0x7a98, 0xd7aa, 0x0, 0x0, 0x0) 889.157536ms ago: executing program 4 (id=1288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000035c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x1, 0x2}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xe9) 829.739583ms ago: executing program 4 (id=1289): socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "d14c9d6385414ac71270b026eb5f5972479ef4898992879b7b9810b6934e925cc727af398000c8099c4344c911638051bda7bc87a663d069c6"}, 0x44) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 360.730772ms ago: executing program 1 (id=1290): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 110.363034ms ago: executing program 3 (id=1291): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_clone(0x24000000, &(0x7f0000000240)="c641146636b11533e1d84c5f3b20f0a1c520b4e24a028b02c3e5a7129b552e38948da0c5e7ee229f2a052a90ff60157acb5d309ab324fd8c76b256ef41d96df8207352781d1b0e2a6985d68e8c06bcfc7992b45d832f84ae72aaaacc662d9aa8577f62a343e0184c0040c2562dd46c23d35dbbeab2105a36c37948cc6213b3e4a9951a7c397e6023482498d5a47b967f4a9c1eb9608115a0411a957a43fd0dfa934badfc90bca0cf0a3c38130e790559f7a379e6333c2583666fea264cbe1caaacd7cae11fb6e7fe7dfc5053543c73ed05de4d7f4a58f6fab1166d17", 0xdc, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="6f417f7076bcd3127fd23be8aec2511e902fcda28ab5dcc3d13f872a09c89f9cd6609590b642319261cb93078e016e5d11b4f1b28beb2606b8b74a4f729fc1ec5f01e00ea1393ae92f0af6a2288f53c012f8181d9d4b825a351227c950b2710d0fc8830c2d4f645953b573354d9a484d4fbc8c1ca8fc91505fb5f79b699ddec4e232b49f830a30fc1cdec49903d6dc6bb0c4e46874662124b8d97b43d5cb35283ea05350f88823e49f518156c018a9b03ae908d989ac9189d33330759e572e0c7b7d2d72851330ae817c3bcc8c0755cb32ac65cbf179") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/155, 0x9b}], 0x1, 0xf0, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000540)={0x0, 0x7a120, 0x40000060}) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [{0x20, '\x00'}]}, 0x6) close_range(r1, r2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x274242, 0x0) sendfile(r4, r4, 0x0, 0xc3) r5 = io_uring_setup(0x2b34, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x0, "9123dbf1aea4ad9484b2cbf5fef9149d2965e642f2557f836662bdd2be1f755f", 0x32314d4e}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) 0s ago: executing program 2 (id=1292): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b26, &(0x7f0000000080)='oDj\"\a') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x1001f0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x4}]}}]}, 0x3c}}, 0x0) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)=@random="24cfc1c7e79d83b8c508c31720e8e952cdc3b91df98f", 0x16, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x502a01, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f00000001c0)={0x9, 0x9, 0xe52, 0xc7f, 0x13, 0xfff}) fsetxattr$security_capability(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): [ 399.718848][ T7407] R13: 0000000000000000 R14: 00007f31b6b45fa0 R15: 00007ffff2fe2ce8 [ 399.720854][ T7407] [ 399.721717][ C2] vkms_vblank_simulate: vblank timer overrun [ 399.774401][ T7412] fuse: Bad value for 'user_id' [ 399.775693][ T7412] fuse: Bad value for 'user_id' [ 399.915913][ T6161] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 399.936457][ T6161] usb 5-1: device descriptor read/8, error -71 [ 399.962531][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 400.017397][ T7425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 400.021184][ T39] audit: type=1400 audit(1733201568.738:430): avc: denied { read } for pid=7424 comm="syz.1.432" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 400.023256][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 400.026885][ T39] audit: type=1400 audit(1733201568.738:431): avc: denied { open } for pid=7424 comm="syz.1.432" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 400.034683][ T39] audit: type=1400 audit(1733201568.738:432): avc: denied { ioctl } for pid=7424 comm="syz.1.432" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 400.148283][ T6911] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 400.153011][ T7438] fuse: Bad value for 'user_id' [ 400.154703][ T7438] fuse: Bad value for 'user_id' [ 400.185879][ T6161] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 400.206502][ T6161] usb 5-1: device descriptor read/8, error -71 [ 400.329516][ T6161] usb usb5-port1: unable to enumerate USB device [ 400.373509][ T7444] binder: 7443:7444 unknown command 0 [ 400.377338][ T7444] binder: 7443:7444 ioctl c0306201 20000480 returned -22 [ 400.459647][ T6161] usb 8-1: USB disconnect, device number 9 [ 400.461712][ T6161] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 400.532996][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 400.653508][ T7457] syz.1.442[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.653588][ T7457] syz.1.442[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.657814][ T7457] syz.1.442[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.662873][ T7457] syzkaller1: entered promiscuous mode [ 400.667306][ T7457] syzkaller1: entered allmulticast mode [ 400.799050][ T7461] FAULT_INJECTION: forcing a failure. [ 400.799050][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 400.802311][ T7461] CPU: 2 UID: 0 PID: 7461 Comm: syz.1.443 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 400.805015][ T7461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 400.807778][ T7461] Call Trace: [ 400.808649][ T7461] [ 400.809412][ T7461] dump_stack_lvl+0x16c/0x1f0 [ 400.810763][ T7461] should_fail_ex+0x497/0x5b0 [ 400.811999][ T7461] ? fs_reclaim_acquire+0xae/0x150 [ 400.813344][ T7461] should_failslab+0xc2/0x120 [ 400.814596][ T7461] __kmalloc_cache_noprof+0x68/0x410 [ 400.816333][ T7461] find_css_set+0x74e/0x1bb0 [ 400.817637][ T7461] ? __pfx_find_css_set+0x10/0x10 [ 400.818997][ T7461] ? cgroup_attach_permissions+0x2aa/0x7b0 [ 400.820543][ T7461] cgroup_can_fork+0xb21/0x11b0 [ 400.821831][ T7461] ? debug_mutex_init+0x37/0x70 [ 400.823103][ T7461] copy_process+0x3f23/0x8df0 [ 400.824345][ T7461] ? __pfx_copy_process+0x10/0x10 [ 400.825688][ T7461] ? __might_fault+0x13b/0x190 [ 400.826962][ T7461] ? __pfx_lock_release+0x10/0x10 [ 400.828315][ T7461] ? __might_fault+0xe3/0x190 [ 400.829545][ T7461] ? __might_fault+0xe3/0x190 [ 400.830771][ T7461] ? _copy_from_user+0x59/0xd0 [ 400.832011][ T7461] kernel_clone+0xfd/0x960 [ 400.833197][ T7461] ? __pfx_kernel_clone+0x10/0x10 [ 400.834539][ T7461] ? vfs_write+0x306/0x1150 [ 400.835717][ T7461] __do_sys_clone3+0x1f9/0x270 [ 400.836955][ T7461] ? __pfx___do_sys_clone3+0x10/0x10 [ 400.838346][ T7461] do_syscall_64+0xcd/0x250 [ 400.839537][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.841074][ T7461] RIP: 0033:0x7f31b697ff19 [ 400.842251][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.847520][ T7461] RSP: 002b:00007f31b785ef28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 400.849912][ T7461] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f31b697ff19 [ 400.852001][ T7461] RDX: 00007f31b785ef40 RSI: 0000000000000058 RDI: 00007f31b785ef40 [ 400.854072][ T7461] RBP: 00007f31b785f0a0 R08: 0000000000000000 R09: 0000000000000058 [ 400.856155][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.858214][ T7461] R13: 0000000000000000 R14: 00007f31b6b45fa0 R15: 00007ffff2fe2ce8 [ 400.860271][ T7461] [ 400.861176][ C2] vkms_vblank_simulate: vblank timer overrun [ 400.887196][ T7468] fuse: Bad value for 'fd' [ 401.194238][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 401.545872][ T7497] fuse: Bad value for 'fd' [ 401.752473][ T7502] FAULT_INJECTION: forcing a failure. [ 401.752473][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 401.758023][ T7502] CPU: 2 UID: 0 PID: 7502 Comm: syz.2.455 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 401.760758][ T7502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 401.763426][ T7502] Call Trace: [ 401.764274][ T7502] [ 401.765026][ T7502] dump_stack_lvl+0x16c/0x1f0 [ 401.766260][ T7502] should_fail_ex+0x497/0x5b0 [ 401.767441][ T7502] ? fs_reclaim_acquire+0xae/0x150 [ 401.768787][ T7502] should_failslab+0xc2/0x120 [ 401.770032][ T7502] __kmalloc_cache_noprof+0x68/0x410 [ 401.771414][ T7502] allocate_cgrp_cset_links+0xc6/0x240 [ 401.772832][ T7502] find_css_set+0x775/0x1bb0 [ 401.774045][ T7502] ? __pfx_find_css_set+0x10/0x10 [ 401.775346][ T7502] ? _atomic_dec_and_lock+0xa2/0x120 [ 401.776725][ T7502] ? cgroup_attach_permissions+0x2aa/0x7b0 [ 401.778134][ T7502] cgroup_can_fork+0xb21/0x11b0 [ 401.779403][ T7502] ? debug_mutex_init+0x37/0x70 [ 401.780673][ T7502] copy_process+0x3f23/0x8df0 [ 401.781915][ T7502] ? __pfx_copy_process+0x10/0x10 [ 401.783229][ T7502] ? __might_fault+0x13b/0x190 [ 401.784465][ T7502] ? __pfx_lock_release+0x10/0x10 [ 401.785794][ T7502] ? __might_fault+0xe3/0x190 [ 401.786979][ T7502] ? __might_fault+0xe3/0x190 [ 401.788145][ T7502] ? _copy_from_user+0x59/0xd0 [ 401.789336][ T7502] kernel_clone+0xfd/0x960 [ 401.790464][ T7502] ? __pfx_kernel_clone+0x10/0x10 [ 401.791787][ T7502] ? vfs_write+0x306/0x1150 [ 401.792981][ T7502] __do_sys_clone3+0x1f9/0x270 [ 401.794211][ T7502] ? __pfx___do_sys_clone3+0x10/0x10 [ 401.795599][ T7502] do_syscall_64+0xcd/0x250 [ 401.796787][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.798350][ T7502] RIP: 0033:0x7fbbb437ff19 [ 401.799507][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.804376][ T7502] RSP: 002b:00007fbbb50caf28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 401.806521][ T7502] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbbb437ff19 [ 401.808565][ T7502] RDX: 00007fbbb50caf40 RSI: 0000000000000058 RDI: 00007fbbb50caf40 [ 401.810779][ T7502] RBP: 00007fbbb50cb0a0 R08: 0000000000000000 R09: 0000000000000058 [ 401.812978][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.815030][ T7502] R13: 0000000000000000 R14: 00007fbbb4545fa0 R15: 00007ffe7608bf48 [ 401.817073][ T7502] [ 401.817940][ C2] vkms_vblank_simulate: vblank timer overrun [ 401.967253][ T6010] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 402.115830][ T6010] usb 8-1: Using ep0 maxpacket: 32 [ 402.118811][ T6010] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 402.120914][ T6010] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 402.123040][ T6010] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 402.125218][ T6010] usb 8-1: config 1 has no interface number 0 [ 402.126842][ T6010] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.129599][ T6010] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 402.132715][ T6010] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 402.134886][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.139873][ T6010] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 402.353188][ T7530] fuse: Bad value for 'fd' [ 402.616897][ T7544] __nla_validate_parse: 1 callbacks suppressed [ 402.616914][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 402.681267][ T7550] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 402.691353][ T7550] team0: Device hsr_slave_0 failed to register rx_handler [ 402.694120][ T6010] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 402.797478][ T7559] fuse: Bad value for 'fd' [ 403.032461][ T6911] usb 8-1: USB disconnect, device number 10 [ 403.103589][ T6911] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 403.132549][ T7567] tipc: Enabling of bearer rejected, media not registered [ 403.161479][ T7572] FAULT_INJECTION: forcing a failure. [ 403.161479][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 403.164815][ T7572] CPU: 3 UID: 0 PID: 7572 Comm: syz.0.480 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 403.167495][ T7572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 403.170208][ T7572] Call Trace: [ 403.171083][ T7572] [ 403.171862][ T7572] dump_stack_lvl+0x16c/0x1f0 [ 403.173071][ T7572] should_fail_ex+0x497/0x5b0 [ 403.174248][ T7572] ? fs_reclaim_acquire+0xae/0x150 [ 403.175516][ T7572] should_failslab+0xc2/0x120 [ 403.176728][ T7572] __kmalloc_cache_noprof+0x68/0x410 [ 403.178076][ T7572] allocate_cgrp_cset_links+0xc6/0x240 [ 403.179444][ T7572] find_css_set+0x775/0x1bb0 [ 403.180624][ T7572] ? __pfx_find_css_set+0x10/0x10 [ 403.181882][ T7572] ? _atomic_dec_and_lock+0xa2/0x120 [ 403.183296][ T7572] ? cgroup_attach_permissions+0x2aa/0x7b0 [ 403.184819][ T7572] cgroup_can_fork+0xb21/0x11b0 [ 403.186082][ T7572] ? debug_mutex_init+0x37/0x70 [ 403.187348][ T7572] copy_process+0x3f23/0x8df0 [ 403.188578][ T7572] ? __pfx_copy_process+0x10/0x10 [ 403.189866][ T7572] ? __might_fault+0x13b/0x190 [ 403.191101][ T7572] ? __pfx_lock_release+0x10/0x10 [ 403.192392][ T7572] ? __might_fault+0xe3/0x190 [ 403.193594][ T7572] ? __might_fault+0xe3/0x190 [ 403.194809][ T7572] ? _copy_from_user+0x59/0xd0 [ 403.196046][ T7572] kernel_clone+0xfd/0x960 [ 403.197212][ T7572] ? __pfx_kernel_clone+0x10/0x10 [ 403.198503][ T7572] ? vfs_write+0x306/0x1150 [ 403.199669][ T7572] __do_sys_clone3+0x1f9/0x270 [ 403.200881][ T7572] ? __pfx___do_sys_clone3+0x10/0x10 [ 403.202229][ T7572] do_syscall_64+0xcd/0x250 [ 403.203416][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.204943][ T7572] RIP: 0033:0x7f21b877ff19 [ 403.206123][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.211070][ T7572] RSP: 002b:00007f21b95d8f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 403.213223][ T7572] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f21b877ff19 [ 403.215259][ T7572] RDX: 00007f21b95d8f40 RSI: 0000000000000058 RDI: 00007f21b95d8f40 [ 403.217307][ T7572] RBP: 00007f21b95d90a0 R08: 0000000000000000 R09: 0000000000000058 [ 403.219619][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.221662][ T7572] R13: 0000000000000000 R14: 00007f21b8945fa0 R15: 00007ffdd5f939d8 [ 403.223728][ T7572] [ 403.255833][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 403.295127][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 403.306881][ T7577] bond1: entered promiscuous mode [ 403.311930][ T7577] bond1 (unregistering): Released all slaves [ 403.449913][ T7583] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 403.452529][ T7583] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 403.556343][ T7585] fuse: Bad value for 'fd' [ 403.675023][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 403.675033][ T39] audit: type=1400 audit(1733201572.388:444): avc: denied { setopt } for pid=7587 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 403.682198][ T39] audit: type=1400 audit(1733201572.388:445): avc: denied { name_bind } for pid=7587 comm="syz.0.486" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 403.685294][ T7588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 403.688365][ T39] audit: type=1400 audit(1733201572.398:446): avc: denied { getattr } for pid=7587 comm="syz.0.486" name="/" dev="9p" ino=37617934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 403.701640][ T39] audit: type=1400 audit(1733201572.418:447): avc: denied { read write } for pid=7587 comm="syz.0.486" name="file0" dev="overlay" ino=37617952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.708672][ T39] audit: type=1400 audit(1733201572.418:448): avc: denied { ioctl open } for pid=7587 comm="syz.0.486" path="/131/bus/file0" dev="overlay" ino=37617952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.715058][ T39] audit: type=1400 audit(1733201572.418:449): avc: denied { write } for pid=7587 comm="syz.0.486" name="file0" dev="9p" ino=37617952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.721110][ T39] audit: type=1400 audit(1733201572.418:450): avc: denied { ioctl } for pid=7587 comm="syz.0.486" path="/file0" dev="9p" ino=37617952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.727016][ T39] audit: type=1400 audit(1733201572.438:451): avc: denied { setattr } for pid=7587 comm="syz.0.486" name="#727" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.733292][ T39] audit: type=1400 audit(1733201572.438:452): avc: denied { link } for pid=7587 comm="syz.0.486" name="#727" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.745788][ T39] audit: type=1400 audit(1733201572.458:453): avc: denied { unlink } for pid=5972 comm="syz-executor" name="file0" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.766425][ T7594] FAULT_INJECTION: forcing a failure. [ 403.766425][ T7594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.766494][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: syz.3.489 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 403.766516][ T7594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 403.766527][ T7594] Call Trace: [ 403.766534][ T7594] [ 403.766541][ T7594] dump_stack_lvl+0x16c/0x1f0 [ 403.766570][ T7594] should_fail_ex+0x497/0x5b0 [ 403.766601][ T7594] _copy_to_user+0x32/0xd0 [ 403.766623][ T7594] simple_read_from_buffer+0xd0/0x160 [ 403.766652][ T7594] proc_fail_nth_read+0x198/0x270 [ 403.766680][ T7594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.766709][ T7594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.766734][ T7594] vfs_read+0x1df/0xbe0 [ 403.766753][ T7594] ? __fget_files+0x1fc/0x3a0 [ 403.766774][ T7594] ? __pfx___mutex_lock+0x10/0x10 [ 403.766798][ T7594] ? __pfx_vfs_read+0x10/0x10 [ 403.766823][ T7594] ? __fget_files+0x206/0x3a0 [ 403.766851][ T7594] ksys_read+0x12b/0x250 [ 403.766870][ T7594] ? __pfx_ksys_read+0x10/0x10 [ 403.766896][ T7594] do_syscall_64+0xcd/0x250 [ 403.766922][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.766947][ T7594] RIP: 0033:0x7fee8e37e92c [ 403.766962][ T7594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 403.766979][ T7594] RSP: 002b:00007fee8f0ff050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.766998][ T7594] RAX: ffffffffffffffda RBX: 00007fee8e545fa0 RCX: 00007fee8e37e92c [ 403.767010][ T7594] RDX: 000000000000000f RSI: 00007fee8f0ff0b0 RDI: 0000000000000004 [ 403.767022][ T7594] RBP: 00007fee8f0ff0a0 R08: 0000000000000000 R09: 0000000000000058 [ 403.767034][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.767045][ T7594] R13: 0000000000000000 R14: 00007fee8e545fa0 R15: 00007ffe95191498 [ 403.767071][ T7594] [ 403.825318][ T7597] capability: warning: `syz.1.488' uses 32-bit capabilities (legacy support in use) [ 403.827753][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.490'. [ 403.835218][ T7600] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.490'. [ 403.841791][ T7600] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.937909][ T7598] block nbd3: shutting down sockets [ 403.975577][ T7614] pim6reg527: entered allmulticast mode [ 404.818976][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 404.821586][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 405.025997][ T6010] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 405.097193][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 405.196936][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 405.199825][ T6010] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 405.202115][ T6010] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 405.205563][ T6010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 405.208647][ T6010] usb 5-1: config 1 has no interface number 0 [ 405.210268][ T6010] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.213007][ T6010] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 405.216478][ T6010] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 405.218798][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.224653][ T6010] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 405.313367][ T7666] fuse: Invalid rootmode [ 405.516956][ T7671] PKCS8: Unsupported PKCS#8 version [ 405.613488][ T7674] qnx4: no qnx4 filesystem (no root dir). [ 405.766903][ T7690] fuse: Invalid rootmode [ 405.776098][ T6010] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 405.810287][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.813701][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.109324][ T5845] usb 5-1: USB disconnect, device number 9 [ 406.111364][ T5845] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 406.274291][ T7721] vxfs: WRONG superblock magic 00000000 at 1 [ 406.276825][ T7721] vxfs: WRONG superblock magic 00000000 at 8 [ 406.279096][ T7721] vxfs: can't find superblock. [ 407.150647][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 407.175257][ T7738] fuse: Bad value for 'rootmode' [ 407.311836][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 407.462140][ T7750] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.055412][ T7772] __nla_validate_parse: 3 callbacks suppressed [ 408.055429][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 408.472155][ T7784] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 408.520355][ T7788] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.710945][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 408.710960][ T39] audit: type=1400 audit(1733201577.428:479): avc: denied { create } for pid=7790 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 408.836621][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 408.990185][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 409.028084][ T7821] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 409.122373][ T39] audit: type=1400 audit(1733201577.838:480): avc: denied { read } for pid=7831 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 409.125868][ T6010] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 409.141483][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.275013][ T39] audit: type=1400 audit(1733201577.988:481): avc: denied { read } for pid=7845 comm="syz.1.565" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.275896][ T6010] usb 8-1: device descriptor read/64, error -71 [ 409.281415][ T39] audit: type=1400 audit(1733201577.988:482): avc: denied { open } for pid=7845 comm="syz.1.565" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.326562][ T39] audit: type=1400 audit(1733201578.048:483): avc: denied { write } for pid=7845 comm="syz.1.565" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.364193][ T39] audit: type=1400 audit(1733201578.078:484): avc: denied { connect } for pid=7852 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 409.393041][ T7858] ======================================================= [ 409.393041][ T7858] WARNING: The mand mount option has been deprecated and [ 409.393041][ T7858] and is ignored by this kernel. Remove the mand [ 409.393041][ T7858] option from the mount to silence this warning. [ 409.393041][ T7858] ======================================================= [ 409.425345][ T39] audit: type=1400 audit(1733201578.138:485): avc: denied { setopt } for pid=7860 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.454936][ C3] Unknown status report in ack skb [ 409.476099][ T39] audit: type=1400 audit(1733201578.188:486): avc: denied { recv } for pid=5960 comm="syz-executor" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 409.494939][ T39] audit: type=1400 audit(1733201578.208:487): avc: denied { search } for pid=7864 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.500299][ T39] audit: type=1400 audit(1733201578.208:488): avc: denied { read } for pid=7867 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.537190][ T6010] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 409.546353][ T6212] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 409.666458][ T6010] usb 8-1: device descriptor read/64, error -71 [ 409.705866][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 409.711221][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.714629][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.719205][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.722650][ T6212] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 409.724907][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.728450][ T6212] usb 5-1: config 0 descriptor?? [ 409.786068][ T6010] usb usb8-port1: attempt power cycle [ 409.859007][ T7893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.862992][ T7893] bond0: (slave rose0): Enslaving as an active interface with an up link [ 409.902017][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 409.905447][ T7906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7906 comm=syz.1.582 [ 409.906017][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7905 comm=syz.1.582 [ 409.946420][ T6212] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 409.949239][ T6212] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 409.951348][ T6212] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 409.953414][ T6212] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 409.955197][ T6212] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 409.960161][ T6212] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 409.981715][ T6212] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 409.984989][ T6212] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 409.996312][ T7918] GUP no longer grows the stack in syz.1.585 (7918): 20004000-2000a000 (20002000) [ 409.998794][ T7918] CPU: 3 UID: 0 PID: 7918 Comm: syz.1.585 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 410.001402][ T7918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.004095][ T7918] Call Trace: [ 410.004943][ T7918] [ 410.005700][ T7918] dump_stack_lvl+0x16c/0x1f0 [ 410.006929][ T7918] gup_vma_lookup+0x1d2/0x220 [ 410.008126][ T7918] __get_user_pages+0x236/0x3b50 [ 410.009394][ T7918] ? find_held_lock+0x2d/0x110 [ 410.010672][ T7918] ? mtree_load+0x30a/0xa40 [ 410.011848][ T7918] ? __pfx_lock_release+0x10/0x10 [ 410.013122][ T7918] ? __pfx___get_user_pages+0x10/0x10 [ 410.014502][ T7918] get_user_pages_remote+0x25e/0xb30 [ 410.015973][ T7918] ? __pfx_get_user_pages_remote+0x10/0x10 [ 410.017472][ T7918] __access_remote_vm+0x235/0x7b0 [ 410.018753][ T7918] ? __pfx___access_remote_vm+0x10/0x10 [ 410.020126][ T7918] ? lock_acquire+0x2f/0xb0 [ 410.021206][ T7918] ? proc_pid_cmdline_read+0x25c/0x900 [ 410.022530][ T7918] proc_pid_cmdline_read+0x4f5/0x900 [ 410.023878][ T7918] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 410.025624][ T7918] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 410.027064][ T7918] vfs_readv+0x6bf/0x890 [ 410.028142][ T7918] ? __pfx___lock_acquire+0x10/0x10 [ 410.029438][ T7918] ? __pfx_vfs_readv+0x10/0x10 [ 410.030648][ T7918] ? __fget_files+0x1fc/0x3a0 [ 410.031828][ T7918] ? __pfx_lock_release+0x10/0x10 [ 410.033108][ T7918] ? __fget_files+0x206/0x3a0 [ 410.034304][ T7918] ? do_preadv+0x1b1/0x270 [ 410.035409][ T7918] do_preadv+0x1b1/0x270 [ 410.036479][ T7918] ? __pfx_do_preadv+0x10/0x10 [ 410.037698][ T7918] do_syscall_64+0xcd/0x250 [ 410.038846][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.040356][ T7918] RIP: 0033:0x7f31b697ff19 [ 410.041489][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.046295][ T7918] RSP: 002b:00007f31b785f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 410.048391][ T7918] RAX: ffffffffffffffda RBX: 00007f31b6b45fa0 RCX: 00007f31b697ff19 [ 410.050345][ T7918] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 410.052296][ T7918] RBP: 00007f31b69f3986 R08: 0000000000000000 R09: 0000000000000000 [ 410.054279][ T7918] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000 [ 410.056281][ T7918] R13: 0000000000000000 R14: 00007f31b6b45fa0 R15: 00007ffff2fe2ce8 [ 410.058296][ T7918] [ 410.145816][ T6010] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 410.157002][ T5947] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.160028][ T5947] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.162956][ T5947] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.166782][ T5947] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.169889][ T1021] usb 5-1: USB disconnect, device number 10 [ 410.171671][ T6010] usb 8-1: device descriptor read/8, error -71 [ 410.202182][ T7936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.425112][ T7949] binder: BINDER_SET_CONTEXT_MGR already set [ 410.426043][ T6010] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 410.427229][ T7949] binder: 7948:7949 ioctl 4018620d 20000040 returned -16 [ 410.432054][ T7949] binder: 7948:7949 ioctl c0306201 200003c0 returned -22 [ 410.446733][ T6010] usb 8-1: device descriptor read/8, error -71 [ 410.451228][ T7949] nvme_fabrics: missing parameter 'transport=%s' [ 410.453229][ T7949] nvme_fabrics: missing parameter 'nqn=%s' [ 410.456887][ T7949] fuse: Unknown parameter ' [ 410.456887][ T7949] 18446744073709551615' [ 410.556039][ T6010] usb usb8-port1: unable to enumerate USB device [ 410.688745][ T7962] ptrace attach of "/syz-executor exec"[7963] was attempted by "/syz-executor exec"[7962] [ 410.860295][ T7974] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.867584][ T7976] netlink: 'syz.1.600': attribute type 28 has an invalid length. [ 410.869599][ T7976] netlink: 'syz.1.600': attribute type 3 has an invalid length. [ 410.871486][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 410.918139][ T7977] netlink: 39 bytes leftover after parsing attributes in process `syz.0.599'. [ 411.000324][ T7984] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 411.199037][ T7990] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 411.231826][ T7992] fuse: Bad value for 'group_id' [ 411.233137][ T7992] fuse: Bad value for 'group_id' [ 411.523911][ T8006] program syz.2.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.717191][ T5975] Bluetooth: Wrong link type (-71) [ 411.920893][ T8043] binder: BINDER_SET_CONTEXT_MGR already set [ 411.922610][ T8043] binder: 8040:8043 ioctl 4018620d 20000300 returned -16 [ 411.977338][ T8043] binder: 8040:8043 ioctl c0306201 20000580 returned -14 [ 412.161647][ T8051] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 412.361687][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 412.495068][ T8061] random: crng reseeded on system resumption [ 412.661847][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 412.678868][ T8061] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 412.691982][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.694987][ T8061] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.727329][ T8070] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.729903][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 412.762748][ T8072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.772842][ T8072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.776297][ T8072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.009806][ T8083] overlayfs: conflicting options: userxattr,redirect_dir=on [ 413.227859][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 413.270796][ T8090] syzkaller0: entered promiscuous mode [ 413.272304][ T8090] syzkaller0: entered allmulticast mode [ 413.318847][ T8095] tmpfs: Invalid gid '0x00000000ffffffff' [ 414.047687][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 414.292842][ T8100] bridge_slave_1: left allmulticast mode [ 414.294518][ T8100] bridge_slave_1: left promiscuous mode [ 414.298016][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.317844][ T8111] syzkaller0: entered promiscuous mode [ 414.319270][ T8111] syzkaller0: entered allmulticast mode [ 414.336198][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 414.336209][ T39] audit: type=1400 audit(1733201583.048:517): avc: denied { setopt } for pid=8112 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 414.842932][ T39] audit: type=1400 audit(1733201583.558:518): avc: denied { setopt } for pid=8132 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.394934][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 415.409153][ T8146] xt_hashlimit: size too large, truncated to 1048576 [ 415.416644][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 415.418889][ T8147] b: renamed from gre0 (while UP) [ 415.428121][ T39] audit: type=1400 audit(1733201584.148:519): avc: denied { ioctl } for pid=8148 comm="syz.1.651" path="socket:[20269]" dev="sockfs" ino=20269 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 415.439085][ T39] audit: type=1400 audit(1733201584.148:520): avc: denied { setopt } for pid=8148 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 415.563216][ T8159] tmpfs: Bad value for 'mpol' [ 415.610526][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 415.733767][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 415.737558][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.740326][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 415.743182][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.745887][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 415.748670][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.751321][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 415.754277][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.757268][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 415.759971][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.762719][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.765606][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.768473][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.771182][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.773923][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.776774][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.779444][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.782125][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.784815][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.787897][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.790719][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.790813][ T8176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50960 sclass=netlink_route_socket pid=8176 comm=syz.2.656 [ 415.793453][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.797854][ T39] audit: type=1400 audit(1733201584.518:521): avc: denied { ioctl } for pid=8167 comm="syz.2.656" path="socket:[19178]" dev="sockfs" ino=19178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.799821][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.808482][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.810937][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.813402][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.816017][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.819884][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.822235][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.824377][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.826903][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.829340][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.831640][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.833811][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.836326][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.838613][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.840845][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.843068][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.845263][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.847776][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.850281][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.852519][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.854551][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.858398][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.860751][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.862963][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.865106][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.867312][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.869469][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.871741][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.873995][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.878742][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.880756][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.882925][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.885022][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.887323][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.889411][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.891509][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.893616][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.895660][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.897899][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.900118][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.902244][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.906414][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.908491][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.910607][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.912998][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.915314][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.917864][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 415.920021][ T8174] bond0: option ad_select: unable to set because the bond device is up [ 416.074012][ T1021] libceph: connect (1)[b::]:6789 error -101 [ 416.075992][ T1021] libceph: mon0 (1)[b::]:6789 connect error [ 416.095231][ T39] audit: type=1400 audit(1733201584.808:522): avc: denied { bind } for pid=8181 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 416.339641][ T1021] libceph: connect (1)[b::]:6789 error -101 [ 416.341660][ T1021] libceph: mon0 (1)[b::]:6789 connect error [ 416.559849][ T39] audit: type=1400 audit(1733201585.278:523): avc: denied { nlmsg_read } for pid=8204 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.601099][ T8208] overlayfs: failed to resolve './bus': -2 [ 416.853237][ T1021] libceph: connect (1)[b::]:6789 error -101 [ 416.855496][ T1021] libceph: mon0 (1)[b::]:6789 connect error [ 416.976742][ T8182] ceph: No mds server is up or the cluster is laggy [ 417.749805][ T8237] syz.3.676 (8237) used greatest stack depth: 19664 bytes left [ 417.831943][ T39] audit: type=1400 audit(1733201586.548:524): avc: denied { mount } for pid=8253 comm="syz.3.681" name="/" dev="configfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 417.837862][ T39] audit: type=1400 audit(1733201586.548:525): avc: denied { search } for pid=8253 comm="syz.3.681" name="/" dev="configfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 417.843895][ T39] audit: type=1400 audit(1733201586.548:526): avc: denied { write } for pid=8253 comm="syz.3.681" name="/" dev="configfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.081016][ T8267] fuse: Unknown parameter '000000000000000000000200x0000000000000005' [ 418.146447][ T8269] netlink: 'syz.3.686': attribute type 11 has an invalid length. [ 418.181211][ T8274] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 418.183020][ T8274] /dev/nbd3: Can't open blockdev [ 418.209968][ T8274] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 418.299009][ T8278] nbd: couldn't find a device at index 127 [ 418.418092][ T8284] __nla_validate_parse: 62 callbacks suppressed [ 418.418103][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 418.423979][ T8284] netlink: 31 bytes leftover after parsing attributes in process `syz.0.691'. [ 418.426750][ T8284] netlink: 'syz.0.691': attribute type 3 has an invalid length. [ 418.428912][ T8284] netlink: 'syz.0.691': attribute type 2 has an invalid length. [ 418.430908][ T8284] netlink: 31 bytes leftover after parsing attributes in process `syz.0.691'. [ 418.452001][ T8286] ALSA: seq fatal error: cannot create timer (-19) [ 418.781210][ T8309] program syz.3.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.015379][ T8317] netlink: 220 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.022138][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.025006][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.028054][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.031689][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.034455][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.038400][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 419.043553][ T8317] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.087975][ T8323] 9pnet_virtio: no channels available for device syz [ 419.985195][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 419.985206][ T39] audit: type=1400 audit(1733201588.698:536): avc: denied { map } for pid=8333 comm="syz.2.706" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 420.052718][ T8340] hfs: can't find a HFS filesystem on dev sr0 [ 420.068795][ T39] audit: type=1400 audit(1733201588.788:537): avc: denied { bind } for pid=8344 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 420.077410][ T39] audit: type=1400 audit(1733201588.788:538): avc: denied { getopt } for pid=8344 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 420.127506][ T39] audit: type=1400 audit(1733201588.848:539): avc: denied { map } for pid=8351 comm="syz.3.712" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 420.133448][ T39] audit: type=1400 audit(1733201588.848:540): avc: denied { execute } for pid=8351 comm="syz.3.712" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 420.152595][ T39] audit: type=1400 audit(1733201588.868:541): avc: denied { create } for pid=8355 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 420.178714][ T8362] tipc: Invalid UDP bearer configuration [ 420.178735][ T8362] tipc: Enabling of bearer rejected, failed to enable media [ 420.202536][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.208745][ T8362] bridge0: entered allmulticast mode [ 420.236267][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.238098][ T8362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.241421][ T8362] bridge0: entered promiscuous mode [ 420.268277][ T39] audit: type=1400 audit(1733201588.988:542): avc: denied { bind } for pid=8369 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.295916][ T8374] bond0: Error: Cannot enslave bond to itself. [ 420.329033][ T8378] loop2: detected capacity change from 0 to 7 [ 420.332566][ T8378] Dev loop2: unable to read RDB block 7 [ 420.334387][ T8378] loop2: unable to read partition table [ 420.335990][ T8378] loop2: partition table beyond EOD, truncated [ 420.337693][ T8378] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.348204][ T39] audit: type=1400 audit(1733201589.068:543): avc: denied { getopt } for pid=8369 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.502608][ T8394] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 420.605858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 420.633095][ T8411] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 420.639505][ T8411] geneve0: entered promiscuous mode [ 420.645123][ T8411] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 420.712982][ T39] audit: type=1400 audit(1733201589.428:544): avc: denied { shutdown } for pid=8422 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.750822][ T39] audit: type=1400 audit(1733201589.468:545): avc: denied { read write } for pid=8431 comm="syz.1.733" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 421.217209][ T8471] nbd: must specify at least one socket [ 422.219791][ T8533] tmpfs: Bad value for 'mpol' [ 423.222300][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.578692][ T8606] __nla_validate_parse: 16 callbacks suppressed [ 423.578706][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 423.633190][ T5975] Bluetooth: hci2: link tx timeout [ 423.635901][ T5975] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 423.636755][ T6911] IPVS: starting estimator thread 0... [ 423.639701][ T5975] Bluetooth: hci2: link tx timeout [ 423.642428][ T5975] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 423.644606][ T8613] IPVS: Unknown mcast interface: netpci0 [ 423.735835][ T8615] IPVS: using max 39 ests per chain, 93600 per kthread [ 424.852375][ T8667] 9pnet_virtio: no channels available for device syz [ 425.006552][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.798'. [ 425.012801][ T8677] 9p: Unknown Cache mode or invalid value emap" [ 425.085628][ T6012] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 425.108544][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 425.108560][ T39] audit: type=1400 audit(425.007:594): avc: denied { create } for pid=8678 comm="syz.1.799" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.112206][ T8679] mmap: syz.1.799 (8679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 425.116745][ T39] audit: type=1400 audit(425.007:595): avc: denied { write } for pid=8678 comm="syz.1.799" name="file0" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.126288][ T39] audit: type=1400 audit(425.007:596): avc: denied { open } for pid=8678 comm="syz.1.799" path="/264/file0" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.133539][ T39] audit: type=1400 audit(425.007:597): avc: denied { ioctl } for pid=8678 comm="syz.1.799" path="/264/file0" dev="tmpfs" ino=1448 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.140757][ T39] audit: type=1400 audit(425.037:598): avc: denied { unlink } for pid=5976 comm="syz-executor" name="file0" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.237927][ T6012] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.241756][ T6012] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.243975][ T6012] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 425.246617][ T6012] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.254753][ T6012] usb 8-1: config 0 descriptor?? [ 425.661920][ T6012] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 425.663806][ T6012] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 425.666610][ T6012] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0003/input/input11 [ 425.677694][ T6012] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 425.717490][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 425.969894][ T6012] usb 8-1: USB disconnect, device number 15 [ 425.981555][ T8702] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 425.983889][ T8702] netlink: 228 bytes leftover after parsing attributes in process `syz.1.806'. [ 425.986710][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 426.315515][ T5946] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 426.475600][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 426.478503][ T5946] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 426.487807][ T5946] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 426.490098][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 426.492334][ T5946] usb 6-1: Product: syz [ 426.493562][ T5946] usb 6-1: Manufacturer: syz [ 426.495088][ T5946] usb 6-1: SerialNumber: syz [ 426.499348][ T5946] usb 6-1: config 0 descriptor?? [ 426.501549][ T8711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 426.547732][ T8713] 9pnet_virtio: no channels available for device syz [ 426.711659][ T5947] usb 6-1: USB disconnect, device number 3 [ 426.745682][ T39] audit: type=1400 audit(426.647:599): avc: denied { bind } for pid=8712 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.754239][ T39] audit: type=1400 audit(426.647:600): avc: denied { listen } for pid=8712 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.858539][ T39] audit: type=1400 audit(426.757:601): avc: denied { read } for pid=8718 comm="syz.3.811" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.938165][ T8719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.940435][ T8719] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 426.950342][ T8719] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 426.953455][ T8719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.955578][ T8719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.958193][ T8719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.961485][ T8719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 428.995393][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 428.996085][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 428.997190][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 429.000174][ T8719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.048705][ T8739] binder: binder_mmap: 8735 20acc000-20ace000 bad vm_flags failed -1 [ 429.104123][ T8741] xt_CT: No such helper "pptp" [ 429.159159][ T8747] binder: 8735:8747 ioctl c0404807 20000240 returned -22 [ 429.289801][ T39] audit: type=1400 audit(429.187:602): avc: denied { nlmsg_read } for pid=8756 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 429.735005][ T8811] netlink: 68 bytes leftover after parsing attributes in process `syz.2.837'. [ 429.744716][ T39] audit: type=1400 audit(429.637:603): avc: denied { read } for pid=8807 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.948208][ T8825] sg_write: data in/out 677497475/54 bytes for SCSI command 0xff-- guessing data in; [ 429.948208][ T8825] program syz.2.843 not setting count and/or reply_len properly [ 430.034995][ T8832] nfs4: Bad value for 'source' [ 430.036748][ T8832] netlink: 'syz.3.845': attribute type 11 has an invalid length. [ 430.113751][ T8844] No such timeout policy "syz1" [ 430.190696][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 430.190705][ T39] audit: type=1400 audit(430.087:611): avc: denied { search } for pid=5650 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=26661 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 430.193663][ T8857] SELinux: syz.3.850 (8857) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 430.207502][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 430.254808][ T8862] rose0: renamed from bond0 (while UP) [ 430.351052][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 430.786630][ T8907] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 430.789441][ T8907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.791885][ T8907] IPv6: NLM_F_CREATE should be set when creating new route [ 430.803577][ T8907] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 430.806291][ T8907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.977237][ T39] audit: type=1400 audit(430.877:612): avc: denied { getopt } for pid=8916 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.076388][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.076543][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 431.078525][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.183562][ T8925] veth1_to_batadv: entered promiscuous mode [ 431.186319][ T8925] macsec2: entered promiscuous mode [ 431.284049][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 431.289950][ T8934] xt_l2tp: missing protocol rule (udp|l2tpip) [ 431.293538][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 431.318128][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.505314][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 431.538584][ T39] audit: type=1400 audit(431.437:613): avc: denied { bind } for pid=8948 comm="syz.3.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.552720][ T39] audit: type=1800 audit(431.447:614): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.873" name="bus" dev="overlay" ino=1278 res=0 errno=0 [ 431.636866][ T8956] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 431.834725][ T8986] xt_nat: multiple ranges no longer supported [ 431.864436][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 432.033980][ T8999] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 432.041300][ T8999] CIFS mount error: No usable UNC path provided in device string! [ 432.041300][ T8999] [ 432.043949][ T8999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.048048][ T39] audit: type=1400 audit(431.947:615): avc: denied { setopt } for pid=8998 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.101919][ T9003] netlink: 'syz.3.887': attribute type 3 has an invalid length. [ 433.155338][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.690593][ T39] audit: type=1400 audit(433.587:616): avc: denied { execute } for pid=9008 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 433.698867][ T39] audit: type=1400 audit(433.587:617): avc: denied { execute_no_trans } for pid=9008 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 433.967121][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.967838][ T8991] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 434.855621][ T8991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.876168][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.888860][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.891574][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.894451][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.896878][ T5982] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.899882][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.907054][ T39] audit: type=1400 audit(434.807:618): avc: denied { mounton } for pid=9014 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 434.950863][ T9022] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 434.952764][ T9022] UDF-fs: Scanning with blocksize 512 failed [ 434.956057][ T9022] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 434.958060][ T9022] UDF-fs: Scanning with blocksize 1024 failed [ 434.959979][ T9022] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 434.961937][ T9022] UDF-fs: Scanning with blocksize 2048 failed [ 434.963782][ T9022] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 434.966765][ T9022] UDF-fs: Scanning with blocksize 4096 failed [ 434.988447][ T9017] pim6reg1: entered promiscuous mode [ 434.989837][ T9017] pim6reg1: entered allmulticast mode [ 434.993774][ T39] audit: type=1400 audit(434.887:619): avc: denied { mount } for pid=9016 comm="syz.3.891" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 435.006445][ T39] audit: type=1400 audit(434.887:620): avc: denied { watch } for pid=9016 comm="syz.3.891" path="/243/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 435.013773][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 435.090763][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.092869][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.097957][ T9014] bridge_slave_0: entered allmulticast mode [ 435.100730][ T9014] bridge_slave_0: entered promiscuous mode [ 435.105395][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.107896][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.110309][ T9014] bridge_slave_1: entered allmulticast mode [ 435.113106][ T9014] bridge_slave_1: entered promiscuous mode [ 435.114972][ T5845] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 435.145449][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.148949][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.178592][ T9034] syz_tun: entered promiscuous mode [ 435.180903][ T9034] batadv_slave_0: entered promiscuous mode [ 435.183033][ T9034] hsr1: entered allmulticast mode [ 435.184459][ T9034] syz_tun: entered allmulticast mode [ 435.187648][ T9034] batadv_slave_0: entered allmulticast mode [ 435.193201][ T9014] team0: Port device team_slave_0 added [ 435.198835][ T9034] syz.3.894 uses old SIOCAX25GETINFO [ 435.200581][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 435.200589][ T39] audit: type=1400 audit(435.097:622): avc: denied { ioctl } for pid=9033 comm="syz.3.894" path="socket:[26926]" dev="sockfs" ino=26926 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.203548][ T9014] team0: Port device team_slave_1 added [ 435.209384][ T39] audit: type=1400 audit(435.097:623): avc: denied { ioctl } for pid=9037 comm="syz.2.896" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 435.226749][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 435.243336][ T9034] vti0: entered promiscuous mode [ 435.244725][ T9034] vti0: entered allmulticast mode [ 435.259742][ T9034] team0: Device ipvlan1 failed to register rx_handler [ 435.268551][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.270626][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.277384][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.282057][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.284005][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.286226][ T5845] usb 6-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.291944][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.295382][ T5845] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 435.295405][ T5845] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 435.295425][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 435.297210][ T5845] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 435.309264][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.311681][ T5845] usb 6-1: Product: syz [ 435.312972][ T5845] usb 6-1: Manufacturer: syz [ 435.314376][ T5845] usb 6-1: SerialNumber: syz [ 435.317462][ T5845] usb 6-1: config 0 descriptor?? [ 435.320673][ T9006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.329346][ T9014] hsr_slave_0: entered promiscuous mode [ 435.331565][ T9014] hsr_slave_1: entered promiscuous mode [ 435.333968][ T9014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.336220][ T9014] Cannot create hsr debugfs directory [ 435.442598][ T9014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.447115][ T9014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.452882][ T9014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.466475][ T9014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.477312][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.479144][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.481249][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.483116][ T9014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.506803][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.513868][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.521398][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.526856][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.564430][ T39] audit: type=1400 audit(435.457:624): avc: denied { connect } for pid=9061 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.578398][ T39] audit: type=1400 audit(435.467:625): avc: denied { shutdown } for pid=9061 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.580152][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.585191][ T9007] fuse: Bad value for 'user_id' [ 435.587079][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.588649][ T9007] fuse: Bad value for 'user_id' [ 435.590866][ T5845] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 435.595436][ T5845] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 435.613827][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 435.615466][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.619245][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.624593][ T9007] fuse: Unknown parameter '‡!H£˜——QDf~ºgroup_id' [ 435.696607][ T6212] usb 6-1: USB disconnect, device number 4 [ 435.723642][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.828089][ T9014] veth0_vlan: entered promiscuous mode [ 435.834037][ T9014] veth1_vlan: entered promiscuous mode [ 435.846174][ T9014] veth0_macvtap: entered promiscuous mode [ 435.849025][ T9014] veth1_macvtap: entered promiscuous mode [ 435.857118][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.861266][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.864079][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.867053][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.869541][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.872837][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.877204][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.882112][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.885188][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.887750][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.890406][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.892980][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.895888][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.898389][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.901081][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.904441][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.908110][ T9014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.910336][ T9014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.912511][ T9014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.914980][ T9014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.944742][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.950939][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.963567][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.967339][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.972084][ T39] audit: type=1400 audit(435.867:626): avc: denied { mounton } for pid=9014 comm="syz-executor" path="/syzkaller.kcBTR4/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 435.978523][ T39] audit: type=1400 audit(435.867:627): avc: denied { mounton } for pid=9014 comm="syz-executor" path="/syzkaller.kcBTR4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 435.986472][ T39] audit: type=1400 audit(435.877:628): avc: denied { mounton } for pid=9014 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 436.035055][ T5289] Bluetooth: hci2: command 0x0405 tx timeout [ 436.047538][ T9104] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 436.051848][ T9104] QAT: failed to copy from user. [ 436.216626][ T9112] random: crng reseeded on system resumption [ 436.543037][ T39] audit: type=1400 audit(436.437:629): avc: denied { map } for pid=9125 comm="syz.3.910" path="/dev/vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 436.548664][ T9126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.642929][ T9133] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 436.664971][ T6161] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 436.847594][ T6161] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 436.850912][ T6161] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.854929][ T6161] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 436.857991][ T6161] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.862366][ T6161] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 436.866091][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 436.869014][ T6161] usb 6-1: Product: syz [ 436.870629][ T6161] usb 6-1: Manufacturer: syz [ 436.877846][ T6161] cdc_wdm 6-1:1.0: skipping garbage [ 436.880141][ T6161] cdc_wdm 6-1:1.0: skipping garbage [ 436.883146][ T6161] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 436.885392][ T6161] cdc_wdm 6-1:1.0: Unknown control protocol [ 436.915075][ T5982] Bluetooth: hci4: command tx timeout [ 436.950177][ T9137] Process accounting resumed [ 437.012545][ T39] audit: type=1400 audit(436.907:630): avc: denied { nlmsg_write } for pid=9142 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 437.020865][ T9145] sctp: [Deprecated]: syz.4.917 (pid 9145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.020865][ T9145] Use struct sctp_sack_info instead [ 437.023643][ T9143] xt_hashlimit: invalid rate [ 437.029808][ T39] audit: type=1326 audit(436.927:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.4.917" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f43df17ff19 code=0x0 [ 437.031043][ T9143] tipc: Started in network mode [ 437.039787][ T9143] tipc: Node identity ff010000000000000000000000000001, cluster identity 2 [ 437.042611][ T9143] tipc: Enabling of bearer rejected, failed to enable media [ 437.077786][ T6161] usb 6-1: USB disconnect, device number 5 [ 437.252272][ T9162] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.920'. [ 437.303209][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 437.327960][ T9169] xt_nfacct: accounting object `sy' does not exists [ 437.623428][ T9195] netlink: 76 bytes leftover after parsing attributes in process `syz.1.932'. [ 437.660468][ T9198] xt_limit: Overflow, try lower: 1207959552/384 [ 437.672651][ T9200] dvmrp8: entered allmulticast mode [ 437.676942][ T9200] dvmrp8: left allmulticast mode [ 437.719239][ T9206] binder: 9205:9206 ioctl 8008551c 200000c0 returned -22 [ 437.725114][ T9207] tap0: tun_chr_ioctl cmd 1074025677 [ 437.727482][ T9207] tap0: linktype set to 805 [ 437.729367][ T9206] tap0: tun_chr_ioctl cmd 1074025677 [ 437.731252][ T9206] tap0: linktype set to 805 [ 437.871897][ T9218] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 437.893338][ T9214] rose0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.897975][ T9214] rose0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.901442][ T9214] rose0 (unregistering): Released all slaves [ 438.058778][ T9238] program syz.1.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.138510][ T9241] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 438.141026][ T9241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.295038][ T5845] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 438.424955][ T5845] usb 6-1: device descriptor read/64, error -71 [ 438.435085][ T5289] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 438.435317][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.604943][ T5947] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 438.674985][ T5845] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 438.754791][ T5947] usb 9-1: Using ep0 maxpacket: 16 [ 438.757938][ T5947] usb 9-1: config 0 has an invalid interface number: 111 but max is 0 [ 438.760739][ T5947] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 438.763664][ T5947] usb 9-1: config 0 has no interface number 0 [ 438.766038][ T5947] usb 9-1: config 0 interface 111 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 438.769326][ T5947] usb 9-1: config 0 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 438.772755][ T5947] usb 9-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 438.776234][ T5947] usb 9-1: config 0 interface 111 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.779825][ T5947] usb 9-1: config 0 interface 111 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.783273][ T5947] usb 9-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 438.786829][ T5947] usb 9-1: config 0 interface 111 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 438.792241][ T5947] usb 9-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=9a.27 [ 438.795314][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.797857][ T5947] usb 9-1: Product: syz [ 438.799233][ T5947] usb 9-1: Manufacturer: syz [ 438.800731][ T5947] usb 9-1: SerialNumber: syz [ 438.803747][ T5947] usb 9-1: config 0 descriptor?? [ 438.806196][ T9249] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 438.814862][ T5845] usb 6-1: device descriptor read/64, error -71 [ 438.936001][ T5845] usb usb6-port1: attempt power cycle [ 438.994925][ T5982] Bluetooth: hci4: command tx timeout [ 439.014639][ T5947] usbhid 9-1:0.111: couldn't find an input interrupt endpoint [ 439.023326][ T5947] usb 9-1: USB disconnect, device number 2 [ 439.274778][ T5845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 439.295397][ T5845] usb 6-1: device descriptor read/8, error -71 [ 439.544756][ T5845] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 439.567500][ T5845] usb 6-1: device descriptor read/8, error -71 [ 439.676463][ T5845] usb usb6-port1: unable to enumerate USB device [ 439.721513][ T9259] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 439.726090][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.728012][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.338078][ T9305] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 440.341273][ T9305] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 440.363789][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 440.363799][ T39] audit: type=1400 audit(440.258:643): avc: denied { create } for pid=9299 comm="syz.3.968" name="#12" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.371418][ T39] audit: type=1400 audit(440.258:644): avc: denied { link } for pid=9299 comm="syz.3.968" name="#12" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.376986][ T39] audit: type=1400 audit(440.258:645): avc: denied { rename } for pid=9299 comm="syz.3.968" name="#13" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.408396][ T9310] input: syz0 as /devices/virtual/input/input12 [ 440.554016][ T39] audit: type=1400 audit(440.448:646): avc: denied { read } for pid=9322 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 440.629123][ T9330] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 440.631661][ T9330] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 440.757107][ T39] audit: type=1326 audit(440.658:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.762561][ T39] audit: type=1326 audit(440.658:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.775530][ T39] audit: type=1326 audit(440.658:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.781274][ T39] audit: type=1326 audit(440.658:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.796136][ T39] audit: type=1326 audit(440.658:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.801837][ T39] audit: type=1326 audit(440.658:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.984" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb437ff19 code=0x50000 [ 440.852934][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 440.911910][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 441.075051][ T5982] Bluetooth: hci4: command tx timeout [ 441.847327][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 441.849688][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 441.862809][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 441.885974][ T9370] netlink: 6 bytes leftover after parsing attributes in process `syz.3.990'. [ 442.554554][ T5920] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 442.711959][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.715966][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 442.719621][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.723392][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.727918][ T5920] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.731507][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.735637][ T5920] usb 8-1: config 0 descriptor?? [ 442.737855][ T9396] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.894583][ T9398] afs: Unknown parameter 'fowner>00000000000000000000' [ 442.910292][ T9398] sp0: Synchronizing with TNC [ 442.916825][ T9398] sp0: Found TNC [ 443.144380][ T5920] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 443.149233][ T5920] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 443.154052][ T5920] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 443.157369][ T5982] Bluetooth: hci4: command tx timeout [ 443.434566][ T5947] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 443.626829][ T6212] usb 8-1: USB disconnect, device number 16 [ 443.794161][ T9424] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 443.806847][ T5947] usb 6-1: unable to get BOS descriptor or descriptor too short [ 443.810278][ T5947] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 443.812234][ T5947] usb 6-1: can't read configurations, error -71 [ 445.145861][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 445.154168][ T9447] 8021q: adding VLAN 0 to HW filter on device team1 [ 445.232055][ T9450] kvm: kvm [9449]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x100000000000000 [ 445.264667][ T6010] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 445.293653][ T9455] fuse: Unknown parameter 'user_i00000000000000000000' [ 445.414583][ T6010] usb 9-1: Using ep0 maxpacket: 32 [ 445.418046][ T6010] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 445.421136][ T6010] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 445.424259][ T6010] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 445.427684][ T6010] usb 9-1: config 1 has no interface number 0 [ 445.429937][ T6010] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.433730][ T6010] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 445.438444][ T6010] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 445.441463][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.448199][ T6010] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 445.586398][ T5845] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 445.734399][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 445.736894][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.739636][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.742118][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.745468][ T5845] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 445.747744][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.750938][ T5845] usb 6-1: config 0 descriptor?? [ 445.924442][ T6212] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 446.002940][ T6010] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 446.075921][ T6212] usb 8-1: config 127 has an invalid interface number: 3 but max is 1 [ 446.078479][ T6212] usb 8-1: config 127 has an invalid interface number: 37 but max is 1 [ 446.080667][ T6212] usb 8-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 446.083165][ T6212] usb 8-1: config 127 has an invalid interface descriptor of length 5, skipping [ 446.085869][ T6212] usb 8-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 446.088173][ T6212] usb 8-1: config 127 has an invalid descriptor of length 221, skipping remainder of the config [ 446.090880][ T6212] usb 8-1: config 127 has no interface number 0 [ 446.092518][ T6212] usb 8-1: config 127 has no interface number 1 [ 446.094193][ T6212] usb 8-1: config 127 interface 3 altsetting 12 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 446.097341][ T6212] usb 8-1: config 127 interface 3 altsetting 12 has an endpoint descriptor with address 0x1F, changing to 0xF [ 446.100962][ T6212] usb 8-1: config 127 interface 3 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 446.103767][ T6212] usb 8-1: config 127 interface 3 altsetting 12 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 446.107056][ T6212] usb 8-1: config 127 interface 3 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 446.110246][ T6212] usb 8-1: config 127 interface 37 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 446.113638][ T6212] usb 8-1: config 127 interface 3 has no altsetting 0 [ 446.115531][ T6212] usb 8-1: config 127 interface 37 has no altsetting 0 [ 446.118929][ T6212] usb 8-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice= a.9e [ 446.121304][ T6212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.123512][ T6212] usb 8-1: Product: syz [ 446.124647][ T6212] usb 8-1: Manufacturer: à – [ 446.125868][ T6212] usb 8-1: SerialNumber: syz [ 446.157698][ T5845] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 446.159572][ T5845] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 446.161361][ T5845] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 446.163191][ T5845] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 446.167055][ T5845] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 446.169607][ T5845] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 446.181534][ T5845] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 446.183662][ T5845] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 446.290296][ T6010] usb 9-1: USB disconnect, device number 3 [ 446.297197][ T6010] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 446.456173][ T9457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.458338][ T9457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.460086][ T9457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 446.461630][ T9457] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 446.466491][ T9457] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 446.471952][ T9457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.476277][ T6212] iowarrior 8-1:127.3: no interrupt-in endpoint found [ 446.479103][ T6010] usb 6-1: USB disconnect, device number 12 [ 446.480433][ T64] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 446.480790][ T6212] iowarrior 8-1:127.37: no interrupt-in endpoint found [ 446.485763][ T64] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 446.488643][ T64] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 446.491461][ T64] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 446.502224][ T6212] usb 8-1: USB disconnect, device number 17 [ 446.946813][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 446.950120][ T9485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.009415][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 447.012745][ T9490] batadv0: entered promiscuous mode [ 447.014784][ T9490] batadv0: entered allmulticast mode [ 447.062769][ T9496] xt_l2tp: unknown flags: 17 [ 447.794564][ T6212] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 447.796870][ T5982] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 447.971355][ T6212] usb 8-1: Using ep0 maxpacket: 32 [ 447.975641][ T6212] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 447.978551][ T6212] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 447.985414][ T6212] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 447.991399][ T6212] usb 8-1: config 1 has no interface number 0 [ 447.995570][ T6212] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.999356][ T6212] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 448.003211][ T6212] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 448.007012][ T6212] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.017500][ T6212] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 448.175177][ T9542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536870912 (1073741824 ns) > initial count (16 ns). Using initial count to start timer. [ 448.444427][ T835] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 448.514435][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 448.514436][ T5289] Bluetooth: hci2: command 0x0405 tx timeout [ 448.569947][ T6212] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 448.597743][ T835] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 448.600991][ T835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.603172][ T835] usb 9-1: Product: syz [ 448.604395][ T835] usb 9-1: Manufacturer: syz [ 448.605644][ T835] usb 9-1: SerialNumber: syz [ 448.608456][ T835] usb 9-1: config 0 descriptor?? [ 448.859949][ T6012] usb 9-1: USB disconnect, device number 4 [ 448.918791][ T6212] usb 8-1: USB disconnect, device number 18 [ 448.927157][ T6212] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 449.217534][ T9564] capability: warning: `syz.1.1047' uses deprecated v2 capabilities in a way that may be insecure [ 449.229593][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.231710][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.233647][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.235708][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.237658][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.241119][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.243072][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.245170][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.247295][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.249231][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.251158][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.253070][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.255151][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.257054][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.259070][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.260982][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.262888][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.265311][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.267233][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.269110][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.271620][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.273799][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.276097][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.278073][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.280000][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.281943][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.283857][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.285946][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.287884][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.289832][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.291744][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.293671][ T5845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.300078][ T5845] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 449.357349][ T9566] ip6t_srh: unknown srh invflags 7863 [ 449.418848][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 449.476770][ T6212] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 449.644641][ T9592] tmpfs: Bad value for 'mpol' [ 449.645546][ T6212] usb 6-1: config 0 has no interfaces? [ 449.649916][ T6212] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 449.652454][ T6212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.655939][ T6212] usb 6-1: config 0 descriptor?? [ 449.677742][ T9585] xt_ipcomp: unknown flags 12 [ 449.707472][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 449.863565][ T9615] fuse: Bad value for 'fd' [ 449.921565][ T39] kauditd_printk_skb: 43999 callbacks suppressed [ 449.921579][ T39] audit: type=1400 audit(449.818:44652): avc: denied { sqpoll } for pid=9563 comm="syz.1.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 449.924031][ T6212] usb 6-1: USB disconnect, device number 13 [ 450.144255][ T835] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 450.224219][ T6012] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 450.304156][ T835] usb 9-1: Using ep0 maxpacket: 8 [ 450.306761][ T835] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.309296][ T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.311836][ T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.314675][ T835] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.318172][ T835] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.320511][ T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.374206][ T6012] usb 8-1: Using ep0 maxpacket: 16 [ 450.378698][ T6012] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.382264][ T6012] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 450.387257][ T6012] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.390412][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.393127][ T6012] usb 8-1: Product: syz [ 450.394747][ T6012] usb 8-1: Manufacturer: syz [ 450.396383][ T6012] usb 8-1: SerialNumber: syz [ 450.525635][ T835] usb 9-1: usb_control_msg returned -32 [ 450.527264][ T835] usbtmc 9-1:16.0: can't read capabilities [ 450.595040][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 450.602965][ T835] usb 8-1: USB disconnect, device number 19 [ 450.699713][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 450.702781][ T9631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'. [ 450.760436][ T9634] serio: Serial port ptm0 [ 450.875075][ T9643] overlayfs: failed to resolve './file1': -2 [ 450.994591][ T9647] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 450.997377][ T9647] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1076'. [ 451.132166][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 451.199087][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 451.354399][ T39] audit: type=1326 audit(451.258:44653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.1086" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee8e37ff19 code=0x0 [ 452.159038][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 452.433364][ T39] audit: type=1400 audit(452.328:44654): avc: denied { getopt } for pid=9700 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 452.434572][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 452.445465][ T9701] vxlan0: entered allmulticast mode [ 452.542286][ T39] audit: type=1400 audit(452.438:44655): avc: denied { create } for pid=9707 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 452.550275][ T39] audit: type=1400 audit(452.448:44656): avc: denied { setattr } for pid=9702 comm="syz.3.1096" name="/" dev="9p" ino=37617934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.558685][ T39] audit: type=1400 audit(452.448:44657): avc: denied { bind } for pid=9707 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 452.559226][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1096'. [ 452.632906][ T39] audit: type=1400 audit(452.528:44658): avc: denied { map } for pid=9702 comm="syz.3.1096" path="/314/file0/bus" dev="9p" ino=37617973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 452.640689][ T39] audit: type=1400 audit(452.528:44659): avc: denied { execute } for pid=9702 comm="syz.3.1096" path="/314/file0/bus" dev="9p" ino=37617973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 452.674087][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 452.920132][ T835] usb 9-1: USB disconnect, device number 5 [ 453.375298][ T39] audit: type=1400 audit(453.278:44660): avc: denied { read write } for pid=9730 comm="syz.4.1104" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 453.385047][ T39] audit: type=1400 audit(453.278:44661): avc: denied { read write } for pid=9730 comm="syz.4.1104" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 453.405260][ T9736] Bluetooth: MGMT ver 1.23 [ 453.581254][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 453.683984][ T6010] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 453.741798][ T9770] dlm: no locking on control device [ 453.744287][ T9770] CIFS: Unable to determine destination address [ 453.845304][ T6010] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.848689][ T6010] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.851166][ T6010] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.855702][ T6010] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.857928][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.861058][ T6010] usb 9-1: config 0 descriptor?? [ 454.474126][ T6010] usbhid 9-1:0.0: can't add hid device: -71 [ 454.475746][ T6010] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 454.479536][ T6010] usb 9-1: USB disconnect, device number 6 [ 454.511494][ T9783] loop2: detected capacity change from 0 to 7 [ 454.517065][ T9783] loop2: [POWERTEC] p1 [ 454.519842][ T9783] loop2: p1 start 2319220 is beyond EOD, truncated [ 454.951025][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'. [ 454.954918][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 454.957859][ T9802] batadv0: entered promiscuous mode [ 454.959813][ T9802] batadv0: entered allmulticast mode [ 454.971742][ T9802] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1124'. [ 454.981434][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.985714][ T9802] Cannot find add_set index 0 as target [ 455.035913][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.038861][ T9806] 9pnet_fd: p9_fd_create_tcp (9806): problem connecting socket to 127.0.0.1 [ 455.079148][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 455.079158][ T39] audit: type=1400 audit(454.978:44668): avc: denied { getopt } for pid=9808 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.089413][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.119915][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1128'. [ 455.237975][ T9813] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1129'. [ 455.397951][ T9824] bond0: (slave team0): Releasing backup interface [ 455.415286][ T9824] team0 (unregistering): Port device team_slave_0 removed [ 455.422243][ T9824] team0 (unregistering): Port device team_slave_1 removed [ 455.542807][ T39] audit: type=1400 audit(455.438:44669): avc: denied { setopt } for pid=9829 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 455.604882][ T39] audit: type=1400 audit(455.508:44670): avc: denied { setattr } for pid=9836 comm="syz.1.1135" name="ALG" dev="sockfs" ino=30354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.811540][ T39] audit: type=1400 audit(455.708:44671): avc: denied { setopt } for pid=9857 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 455.816486][ T39] audit: type=1400 audit(455.708:44672): avc: denied { connect } for pid=9857 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 455.821200][ T39] audit: type=1400 audit(455.718:44673): avc: denied { ioctl } for pid=9857 comm="syz.1.1143" path="socket:[29695]" dev="sockfs" ino=29695 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 455.925056][ T9869] block nbd2: NBD_DISCONNECT [ 455.927243][ T39] audit: type=1400 audit(455.828:44674): avc: denied { setopt } for pid=9867 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 455.947027][ T9871] block nbd2: Disconnected due to user request. [ 455.949584][ T9871] block nbd2: shutting down sockets [ 455.988339][ T39] audit: type=1400 audit(455.888:44675): avc: denied { setattr } for pid=9874 comm="syz.2.1147" name="file0" dev="9p" ino=37617952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 456.006439][ T9884] 9pnet_virtio: no channels available for device syz [ 456.185898][ T39] audit: type=1400 audit(3016.086:44676): avc: denied { sys_admin } for pid=9906 comm="syz.1.1154" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 456.232135][ T9908] tmpfs: Bad value for 'mpol' [ 456.303641][ T9928] loop7: detected capacity change from 0 to 16384 [ 456.359169][ T9928] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 456.362490][ T9928] buffer_io_error: 4 callbacks suppressed [ 456.362502][ T9928] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 456.420537][ T9935] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 14 prio class 0 [ 456.424049][ T9935] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 456.427502][ T9935] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 456.430079][ T9935] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 456.432673][ T9935] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 456.435829][ T9935] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 456.438495][ T9935] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 456.441052][ T9935] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 456.443662][ T9935] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 456.446546][ T9935] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 456.483566][ T9941] xt_hashlimit: overflow, rate too high: 0 [ 456.486178][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 456.639038][ T39] audit: type=1400 audit(3016.536:44677): avc: denied { append } for pid=9953 comm="syz.1.1165" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 456.723100][ T9956] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 457.037798][ T9981] openvswitch: netlink: Message has 1275 unknown bytes. [ 457.040415][ T9981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.222990][ T9987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.224696][ T9987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.226280][ T9987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 457.228097][ T9987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.268286][ T9993] program syz.2.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.318324][T10001] overlayfs: failed to get inode (-116) [ 457.320140][T10001] overlayfs: failed to look up (file0) for ino (-116) [ 457.364970][T10006] tmpfs: Unknown parameter 'nr_^lock\' [ 457.423055][T10009] __nla_validate_parse: 2 callbacks suppressed [ 457.423071][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 457.866658][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 458.033957][ T5289] Bluetooth: hci1: command 0x1003 tx timeout [ 458.033993][ T5982] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 458.081295][T10037] netlink: 'syz.4.1191': attribute type 10 has an invalid length. [ 458.094987][T10037] team0: Device veth0_macvtap failed to register rx_handler [ 458.140007][T10044] netlink: 'syz.4.1192': attribute type 9 has an invalid length. [ 458.145952][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.148651][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.151100][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.153534][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.156270][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.158731][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.161147][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.163552][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.167117][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.170156][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.172906][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.173075][T10035] tipc: New replicast peer: 0.0.0.0 [ 458.175468][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.176941][T10035] tipc: Enabled bearer , priority 10 [ 458.179539][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.182706][T10035] tipc: New replicast peer: 100.1.1.0 [ 458.184024][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.188302][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.191044][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.193597][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.196197][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.199212][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.201728][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.204340][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.206911][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.209356][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.211839][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.214455][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.216948][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.219336][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.221792][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.224285][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.226770][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.229237][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.231724][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.234393][ T5982] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.370008][T10068] fuse: Unknown parameter 'group_i`' [ 458.376140][T10068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10068 comm=syz.1.1197 [ 458.409118][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 458.410192][T10072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1200'. [ 459.230228][T10106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=10106 comm=syz.1.1211 [ 459.233946][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 459.234236][ T5289] Bluetooth: hci4: command 0x0c1a tx timeout [ 459.236445][ T5982] Bluetooth: hci2: command 0x0405 tx timeout [ 459.306159][ T6212] tipc: Node number set to 966215798 [ 459.360029][T10119] FAULT_INJECTION: forcing a failure. [ 459.360029][T10119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.363595][T10119] CPU: 2 UID: 0 PID: 10119 Comm: syz.4.1214 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 459.366332][T10119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.369023][T10119] Call Trace: [ 459.369895][T10119] [ 459.370658][T10119] dump_stack_lvl+0x16c/0x1f0 [ 459.371898][T10119] should_fail_ex+0x497/0x5b0 [ 459.373137][T10119] _copy_from_user+0x2e/0xd0 [ 459.374326][T10119] __io_uring_register+0xb36/0x2290 [ 459.375641][T10119] ? trace_contention_end+0xee/0x140 [ 459.376996][T10119] ? __pfx___io_uring_register+0x10/0x10 [ 459.378424][T10119] ? __mutex_lock+0x1cc/0xa60 [ 459.379631][T10119] ? __x64_sys_io_uring_register+0x168/0x2b0 [ 459.381134][T10119] ? __pfx_lock_release+0x10/0x10 [ 459.382397][T10119] ? __pfx___mutex_lock+0x10/0x10 [ 459.383648][T10119] ? __fget_files+0x40/0x3a0 [ 459.384808][T10119] ? __fget_files+0x206/0x3a0 [ 459.386011][T10119] __x64_sys_io_uring_register+0x17a/0x2b0 [ 459.387457][T10119] do_syscall_64+0xcd/0x250 [ 459.388600][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.390072][T10119] RIP: 0033:0x7f43df17ff19 [ 459.391185][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.395870][T10119] RSP: 002b:00007f43dffc2058 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 459.397947][T10119] RAX: ffffffffffffffda RBX: 00007f43df345fa0 RCX: 00007f43df17ff19 [ 459.399883][T10119] RDX: 0000000020000100 RSI: 0000000000000013 RDI: 0000000000000003 [ 459.401815][T10119] RBP: 00007f43dffc20a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.403778][T10119] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 459.405736][T10119] R13: 0000000000000000 R14: 00007f43df345fa0 R15: 00007ffc58a4e9f8 [ 459.407690][T10119] [ 459.696242][T10133] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 459.828698][T10145] FAULT_INJECTION: forcing a failure. [ 459.828698][T10145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.832252][T10145] CPU: 0 UID: 0 PID: 10145 Comm: syz.3.1223 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 459.834996][T10145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.838362][T10145] Call Trace: [ 459.839341][T10145] [ 459.840094][T10145] dump_stack_lvl+0x16c/0x1f0 [ 459.841289][T10145] should_fail_ex+0x497/0x5b0 [ 459.842458][T10145] _copy_to_user+0x32/0xd0 [ 459.843558][T10145] __io_uring_register+0x1b14/0x2290 [ 459.844874][T10145] ? __pfx___io_uring_register+0x10/0x10 [ 459.846315][T10145] ? __mutex_lock+0x1cc/0xa60 [ 459.847760][T10145] ? __x64_sys_io_uring_register+0x168/0x2b0 [ 459.849306][T10145] ? __pfx_lock_release+0x10/0x10 [ 459.850565][T10145] ? __pfx___mutex_lock+0x10/0x10 [ 459.851823][T10145] ? __fget_files+0x40/0x3a0 [ 459.853003][T10145] ? __fget_files+0x206/0x3a0 [ 459.854229][T10145] __x64_sys_io_uring_register+0x17a/0x2b0 [ 459.855675][T10145] do_syscall_64+0xcd/0x250 [ 459.857052][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.859106][T10145] RIP: 0033:0x7fee8e37ff19 [ 459.860660][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.867252][T10145] RSP: 002b:00007fee8f0ff058 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 459.870156][T10145] RAX: ffffffffffffffda RBX: 00007fee8e545fa0 RCX: 00007fee8e37ff19 [ 459.872870][T10145] RDX: 0000000020000100 RSI: 0000000000000013 RDI: 0000000000000003 [ 459.875578][T10145] RBP: 00007fee8f0ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.878300][T10145] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 459.880972][T10145] R13: 0000000000000000 R14: 00007fee8e545fa0 R15: 00007ffe95191498 [ 459.883690][T10145] [ 459.923239][T10148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 459.960898][T10148] jffs2: Unknown parameter '}.+@{}^#*\]^^•$-)' [ 460.904244][ T835] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 461.063787][ T835] usb 9-1: Using ep0 maxpacket: 32 [ 461.069736][ T835] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 461.072541][ T835] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 461.075252][ T835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 461.077595][ T835] usb 9-1: config 1 has no interface number 0 [ 461.079136][ T835] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.082475][ T835] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 461.086563][ T835] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 461.089031][ T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.106469][ T835] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 461.323703][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.663076][ T835] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 462.020853][ T6212] usb 9-1: USB disconnect, device number 7 [ 462.023966][ T6212] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 462.214259][T10193] FAULT_INJECTION: forcing a failure. [ 462.214259][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.218034][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.1.1237 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 462.220691][T10193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.223379][T10193] Call Trace: [ 462.224238][T10193] [ 462.225009][T10193] dump_stack_lvl+0x16c/0x1f0 [ 462.226212][T10193] should_fail_ex+0x497/0x5b0 [ 462.227439][T10193] _copy_to_user+0x32/0xd0 [ 462.228628][T10193] simple_read_from_buffer+0xd0/0x160 [ 462.230005][T10193] proc_fail_nth_read+0x198/0x270 [ 462.231715][T10193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.233299][T10193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.234673][T10193] vfs_read+0x1df/0xbe0 [ 462.235747][T10193] ? __fget_files+0x1fc/0x3a0 [ 462.236898][T10193] ? __pfx___mutex_lock+0x10/0x10 [ 462.238461][T10193] ? __pfx_vfs_read+0x10/0x10 [ 462.240116][T10193] ? __fget_files+0x206/0x3a0 [ 462.241785][T10193] ksys_read+0x12b/0x250 [ 462.243207][T10193] ? __pfx_ksys_read+0x10/0x10 [ 462.245073][T10193] do_syscall_64+0xcd/0x250 [ 462.246688][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.248807][T10193] RIP: 0033:0x7f31b697e92c [ 462.250350][T10193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.256780][T10193] RSP: 002b:00007f31b785f050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.259614][T10193] RAX: ffffffffffffffda RBX: 00007f31b6b45fa0 RCX: 00007f31b697e92c [ 462.262331][T10193] RDX: 000000000000000f RSI: 00007f31b785f0b0 RDI: 0000000000000004 [ 462.265002][T10193] RBP: 00007f31b785f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.267855][T10193] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 462.270498][T10193] R13: 0000000000000000 R14: 00007f31b6b45fa0 R15: 00007ffff2fe2ce8 [ 462.273208][T10193] [ 463.090507][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 463.090522][ T39] audit: type=1400 audit(3022.987:44711): avc: denied { write } for pid=10210 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 463.383786][T10221] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 463.403563][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.420979][T10226] devtmpfs: Cannot change global quota limit on remount [ 463.423570][ T39] audit: type=1400 audit(3023.317:44712): avc: denied { remount } for pid=10225 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 464.487072][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 464.558972][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 465.504536][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'. [ 465.507796][T10269] all: renamed from erspan0 (while UP) [ 465.572663][ T39] audit: type=1400 audit(3025.467:44713): avc: denied { accept } for pid=10268 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 465.840607][T10278] loop2: detected capacity change from 0 to 7 [ 465.844871][T10278] Dev loop2: unable to read RDB block 7 [ 465.847061][T10278] loop2: unable to read partition table [ 465.849285][T10278] loop2: partition table beyond EOD, truncated [ 465.851446][T10278] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 465.976220][T10288] netlink: 'syz.1.1272': attribute type 3 has an invalid length. [ 465.978689][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 465.981702][ T39] audit: type=1400 audit(3025.877:44714): avc: denied { shutdown } for pid=10282 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.171529][ T39] audit: type=1400 audit(3026.067:44715): avc: denied { ioctl } for pid=10295 comm="syz.1.1274" path="socket:[33989]" dev="sockfs" ino=33989 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 466.178838][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 466.181743][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 466.213626][T10299] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 466.595379][T10322] bad cache= option: none [ 466.595379][T10322] [ 466.597834][T10322] CIFS: VFS: bad cache= option: none [ 466.602602][T10328] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1284'. [ 466.602709][T10322] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 466.652532][ T39] audit: type=1400 audit(3026.547:44716): avc: denied { getopt } for pid=10330 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 467.063395][ T6010] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 467.223369][ T6010] usb 9-1: Using ep0 maxpacket: 32 [ 467.226766][ T6010] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 467.230275][ T6010] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 467.233038][ T6010] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 467.236590][ T6010] usb 9-1: config 1 has no interface number 0 [ 467.238548][ T6010] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.241989][ T6010] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 467.246277][ T6010] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 467.249277][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.257131][ T6010] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 467.812865][ T6010] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 467.826350][T10347] syz.1.1290 (10347): drop_caches: 2 [ 467.827077][T10353] ------------[ cut here ]------------ [ 467.830308][T10353] WARNING: CPU: 2 PID: 10353 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.833941][T10353] Modules linked in: [ 467.835073][T10353] CPU: 2 UID: 0 PID: 10353 Comm: syz.2.1292 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 467.839092][T10353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.841697][T10353] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.843586][T10353] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 da b2 d9 fa 85 ed 75 09 e8 91 b0 d9 fa 90 <0f> 0b 90 e8 88 b0 d9 fa 31 ff 44 89 f6 e8 be b2 d9 fa 45 85 f6 75 [ 467.848293][T10353] RSP: 0018:ffffc9000d0a7768 EFLAGS: 00010283 [ 467.849756][T10353] RAX: 000000000000d067 RBX: ffff888036336e32 RCX: ffffc90007ad4000 [ 467.851661][T10353] RDX: 0000000000080000 RSI: ffffffff86c0557f RDI: 0000000000000005 [ 467.853626][T10353] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 467.855556][T10353] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88803078b0a0 [ 467.857756][T10353] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 467.859727][T10353] FS: 00007fbbb50cb6c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 467.861911][T10353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.863714][T10353] CR2: 00007f43dff9f000 CR3: 00000000520be000 CR4: 0000000000352ef0 [ 467.865680][T10353] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 467.867849][T10353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.869809][T10353] Call Trace: [ 467.870651][T10353] [ 467.871368][T10353] ? __warn+0xea/0x3c0 [ 467.872347][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.874030][T10353] ? report_bug+0x3c0/0x580 [ 467.875217][T10353] ? handle_bug+0x54/0xa0 [ 467.876321][T10353] ? exc_invalid_op+0x17/0x50 [ 467.877532][T10353] ? asm_exc_invalid_op+0x1a/0x20 [ 467.878785][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 467.880402][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.882049][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 467.883707][T10353] mac80211_hwsim_add_interface+0x2d6/0x370 [ 467.885176][T10353] drv_add_interface+0x1b4/0x970 [ 467.886413][T10353] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 467.888050][T10353] ieee80211_do_open+0x127f/0x1e80 [ 467.889336][T10353] ieee80211_open+0x18a/0x260 [ 467.890522][T10353] ? __pfx_ieee80211_open+0x10/0x10 [ 467.891826][T10353] __dev_open+0x2d4/0x4e0 [ 467.892877][T10353] ? __pfx___dev_open+0x10/0x10 [ 467.894291][T10353] ? __local_bh_enable_ip+0xa4/0x120 [ 467.895732][T10353] __dev_change_flags+0x561/0x720 [ 467.896984][T10353] ? __pfx___dev_change_flags+0x10/0x10 [ 467.898352][T10353] dev_change_flags+0x8f/0x160 [ 467.899532][T10353] devinet_ioctl+0x11d9/0x1f50 [ 467.900743][T10353] ? __pfx_devinet_ioctl+0x10/0x10 [ 467.902032][T10353] ? _copy_from_user+0x59/0xd0 [ 467.903288][T10353] inet_ioctl+0x3aa/0x3f0 [ 467.904364][T10353] ? __pfx_inet_ioctl+0x10/0x10 [ 467.905580][T10353] ? __pfx_lock_release+0x10/0x10 [ 467.906843][T10353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.908332][T10353] sock_do_ioctl+0x116/0x280 [ 467.909516][T10353] ? __pfx_sock_do_ioctl+0x10/0x10 [ 467.910790][T10353] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 467.912407][T10353] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 467.914078][T10353] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 467.915760][T10353] sock_ioctl+0x228/0x6c0 [ 467.916841][T10353] ? __pfx_sock_ioctl+0x10/0x10 [ 467.918078][T10353] ? selinux_file_ioctl+0x180/0x270 [ 467.919383][T10353] ? selinux_file_ioctl+0xb4/0x270 [ 467.920674][T10353] ? __pfx_sock_ioctl+0x10/0x10 [ 467.921915][T10353] __x64_sys_ioctl+0x190/0x200 [ 467.923155][T10353] do_syscall_64+0xcd/0x250 [ 467.924372][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.925812][T10353] RIP: 0033:0x7fbbb437fb1b [ 467.926927][T10353] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 467.931643][T10353] RSP: 002b:00007fbbb50c9e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.933899][T10353] RAX: ffffffffffffffda RBX: 00007fbbb50c9fa0 RCX: 00007fbbb437fb1b [ 467.936162][T10353] RDX: 00007fbbb50c9f00 RSI: 0000000000008914 RDI: 000000000000000e [ 467.938161][T10353] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 467.940144][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 467.942133][T10353] R13: 0000000000000048 R14: 00007fbbb50c9fc0 R15: 00007fbbb50c9f00 [ 467.944121][T10353] [ 467.944892][T10353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 467.946685][T10353] CPU: 2 UID: 0 PID: 10353 Comm: syz.2.1292 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 467.949376][T10353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.951969][T10353] Call Trace: [ 467.952802][T10353] [ 467.953533][T10353] dump_stack_lvl+0x3d/0x1f0 [ 467.954682][T10353] panic+0x71d/0x800 [ 467.955652][T10353] ? __pfx_panic+0x10/0x10 [ 467.956739][T10353] ? show_trace_log_lvl+0x29d/0x3d0 [ 467.958074][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.959708][T10353] check_panic_on_warn+0xab/0xb0 [ 467.960952][T10353] __warn+0xf6/0x3c0 [ 467.961948][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.963556][T10353] report_bug+0x3c0/0x580 [ 467.964643][T10353] handle_bug+0x54/0xa0 [ 467.965690][T10353] exc_invalid_op+0x17/0x50 [ 467.966815][T10353] asm_exc_invalid_op+0x1a/0x20 [ 467.968057][T10353] RIP: 0010:mac80211_hwsim_config_mac_nl.isra.0+0xe0/0x330 [ 467.969817][T10353] Code: 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 3f 02 00 00 0f b7 6b 04 31 ff 44 09 fd 89 ee e8 da b2 d9 fa 85 ed 75 09 e8 91 b0 d9 fa 90 <0f> 0b 90 e8 88 b0 d9 fa 31 ff 44 89 f6 e8 be b2 d9 fa 45 85 f6 75 [ 467.974516][T10353] RSP: 0018:ffffc9000d0a7768 EFLAGS: 00010283 [ 467.975962][T10353] RAX: 000000000000d067 RBX: ffff888036336e32 RCX: ffffc90007ad4000 [ 467.978180][T10353] RDX: 0000000000080000 RSI: ffffffff86c0557f RDI: 0000000000000005 [ 467.980243][T10353] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 467.982199][T10353] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88803078b0a0 [ 467.984159][T10353] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 467.986100][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 467.987755][T10353] ? mac80211_hwsim_config_mac_nl.isra.0+0xdf/0x330 [ 467.989377][T10353] mac80211_hwsim_add_interface+0x2d6/0x370 [ 467.990836][T10353] drv_add_interface+0x1b4/0x970 [ 467.992041][T10353] ? ieee80211_set_sdata_offload_flags+0x213/0x480 [ 467.993587][T10353] ieee80211_do_open+0x127f/0x1e80 [ 467.994827][T10353] ieee80211_open+0x18a/0x260 [ 467.995983][T10353] ? __pfx_ieee80211_open+0x10/0x10 [ 467.997317][T10353] __dev_open+0x2d4/0x4e0 [ 467.998541][T10353] ? __pfx___dev_open+0x10/0x10 [ 467.999747][T10353] ? __local_bh_enable_ip+0xa4/0x120 [ 468.001057][T10353] __dev_change_flags+0x561/0x720 [ 468.002253][T10353] ? __pfx___dev_change_flags+0x10/0x10 [ 468.003590][T10353] dev_change_flags+0x8f/0x160 [ 468.004771][T10353] devinet_ioctl+0x11d9/0x1f50 [ 468.005945][T10353] ? __pfx_devinet_ioctl+0x10/0x10 [ 468.007220][T10353] ? _copy_from_user+0x59/0xd0 [ 468.008390][T10353] inet_ioctl+0x3aa/0x3f0 [ 468.009557][T10353] ? __pfx_inet_ioctl+0x10/0x10 [ 468.010804][T10353] ? __pfx_lock_release+0x10/0x10 [ 468.012063][T10353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.013521][T10353] sock_do_ioctl+0x116/0x280 [ 468.014662][T10353] ? __pfx_sock_do_ioctl+0x10/0x10 [ 468.015916][T10353] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 468.017553][T10353] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 468.019167][T10353] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 468.020890][T10353] sock_ioctl+0x228/0x6c0 [ 468.021999][T10353] ? __pfx_sock_ioctl+0x10/0x10 [ 468.023225][T10353] ? selinux_file_ioctl+0x180/0x270 [ 468.024536][T10353] ? selinux_file_ioctl+0xb4/0x270 [ 468.025835][T10353] ? __pfx_sock_ioctl+0x10/0x10 [ 468.027059][T10353] __x64_sys_ioctl+0x190/0x200 [ 468.028348][T10353] do_syscall_64+0xcd/0x250 [ 468.029569][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.031039][T10353] RIP: 0033:0x7fbbb437fb1b [ 468.032168][T10353] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 468.036995][T10353] RSP: 002b:00007fbbb50c9e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.039767][T10353] RAX: ffffffffffffffda RBX: 00007fbbb50c9fa0 RCX: 00007fbbb437fb1b [ 468.041738][T10353] RDX: 00007fbbb50c9f00 RSI: 0000000000008914 RDI: 000000000000000e [ 468.043679][T10353] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 468.045631][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 468.047634][T10353] R13: 0000000000000048 R14: 00007fbbb50c9fc0 R15: 00007fbbb50c9f00 [ 468.049597][T10353] [ 468.050955][T10353] Kernel Offset: disabled [ 468.052126][T10353] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:53:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888041530020 RCX=ffffffff84d01b16 RDX=ffff888029edc880 RSI=ffffffff820b7d70 RDI=ffff888041530020 RBP=0000000000000fe0 RSP=ffffc90003be7c90 R8 =0000000000000001 R9 =ffffed10082a61ff R10=ffff888041530fff R11=0000000000000000 R12=0000000000000000 R13=ffff888041530020 R14=0000000000000fe0 R15=00007fff0e6e7a58 RIP=ffffffff819a061c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f04e2f92280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43dffa1d58 CR3=0000000032492000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040010040 Opmask01=0000000000000000 Opmask02=00000000bffeffbf Opmask03=0410008081001001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ecd50b4ca0 000055ecd5040750 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ecd50b4ca0 000055ecd5040750 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3838383838383838 3838383838383838 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d0519 1b5a1a474f475a05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a474f475a054149 454648051a041a4f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4900434e455f524f 444e45565f444900 524f444e45565f44 49006c6169726573 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006f696475610079 70706f6c66006970 6174610063627200 636972656e656700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004a4c415044005c 55554a4943004c55 4451440046475700 464c57404b404200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a867356d216fe53 000055e98a322fd5 00000000000000e1 0000000000000034 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04e2fabd4c 00007f04e2fabd47 0000000000000071 000000000000312e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ecd50b4cf0 00007fff0e6e0030 6d656d702f6b636f 6c622f302e306563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ecd5003c10 000055ecd5003b90 000055ecd5003b10 000055ecd5011ac0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffffffffffff RCX=ffffffff81767932 RDX=1ffff1100920115a RSI=0000000000000008 RDI=ffffffff96e52cd8 RBP=0000000000000000 RSP=ffffc9000d077c20 R8 =0000000000000000 R9 =fffffbfff2dca59b R10=ffffffff96e52cdf R11=0000000000000000 R12=0000000000000000 R13=ffff888049008000 R14=0000000000000005 R15=ffff888049008ae0 RIP=ffffffff81767487 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f31b781d6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a235ce0908 CR3=000000004ee48000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b69f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc9000d0a70c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbbb50cb6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43dff9f000 CR3=00000000520be000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffe0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb43f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbb4510488 00007fbbb4510480 00007fbbb4510478 00007fbbb4510450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffffffff8b7ad243 RCX=ffffffff8b274df7 RDX=ffff888023dc0000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888052412b4e RSP=ffffc900055e77c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000053 R14=ffffc900055e78c8 R15=0000000000000005 RIP=ffffffff819a0610 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fee8f0de6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee8f0fefb8 CR3=000000005f9e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e3f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f751fbed2bd6266 837f55f242e66529 9d14f9fef5cbb284 94ada4aef1db2391 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8f07d100 00007fee8e510440 00007fee8e510004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee8e510498 00007fee8e510490 00007fee8e510488 00007fee8e510480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79f1cb65ac32cb55 078ccc3b7c81ae30 1385722d7d7b0c2e 579e753033d38991 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac89d908e93ab0a9 18c05681519fe423 88f85053a03e2835 cbd5437bd9b82421 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 667468e4c4b06bdc d60399c4de1cfc30 0a839fb432e2c4de 9d699bf7b55f5091 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fca81c8cbc4f4d48 9a4d3573b5535964 4f2d0c83c80f0d71 b250c92712355a82 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000