last executing test programs: 49.011553454s ago: executing program 1 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xe6da) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params]}, 0x24}}, 0x404) 49.011412886s ago: executing program 1 (id=551): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r1 = io_uring_setup(0x30dc, &(0x7f0000000600)={0x0, 0x0, 0x40, 0x2, 0x300}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000000c0), 0x4f) close(r1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x202d82, 0x61) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x8000, 0xb70) 48.801728984s ago: executing program 1 (id=555): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000003680), 0x400038c, 0x2000, 0x0) (async) recvmmsg(r2, &(0x7f0000003680), 0x400038c, 0x2000, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) syz_emit_ethernet(0x39, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@mpls_uc={0x8847, {[{0xec10, 0x0, 0x1}], @generic="8d96a56af77c3221f86180ed1224b1358889c04adc1874e08f7dd4366998abbd1c5b1c94657131"}}}}, 0x0) (async) syz_emit_ethernet(0x39, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@mpls_uc={0x8847, {[{0xec10, 0x0, 0x1}], @generic="8d96a56af77c3221f86180ed1224b1358889c04adc1874e08f7dd4366998abbd1c5b1c94657131"}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3505}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c854}, 0x20004980) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000280)={0x80000001, 0x6, 0x7, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000002c0061100800000000002d0040000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.651194423s ago: executing program 1 (id=558): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000002d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='freezer.state\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x1a3) 48.650443242s ago: executing program 1 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x68060200) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000880)={'#! ', './file2', [{0x20, ','}, {0x20, 'ext4\x00\xae\xecm}\xab\xa4VI\xae4Ra\x17J\xb8!!h\xed\xe1\xeb\x19\xa3\xd5\xdc\x8d\xa5[9\xdf\x8e\x8d\x854W\x8f2ZS\xbe,\x02~M!e\xb6t\xac\xafn_\xb6\x9f%\xff\xd0\x91\xb20`\xac&\x98}\x96y\x97\xb8\xe8N\xcf~\xf3\x1bo\xe2\'\x8e\x9fy&\xd5:~\xc7\x8e\xdc\xac\xac\xb5z\xc3@\xd7\x02Y\x86\xf4S\x82\x9e\x9d\x17\xf7\xf5g\xad\xd7\xdf!\xbc\x02\x1bT\xe0a\x7f\x94\xb8W\xbd\xf4\xe8\xb7\x82\xa4~1\x91r\xcc\xe6\xb3\x92}{]\xf7w\x9cm\x82\xec\x15\xc0\xdcy\x9d>\x18\x8e\':\xb7\xe8\x00\xd8\xfe\x7f\n\xaa\xd0\xbe\xb0\f\x89v\xf0\xcc2\xf4\x95\xd3~\xd7\xa1\xa5j\x9e\x11)\xa4\x95U\xb0U\xf5b&\r\r\xa5F\xa5W\xaa\xb2\x9fE\x8eq\xed\xb9\x01_'}, {0x20, '\x00\x14\xc5\x9bm\xb8\xb2?\x0e\xe9!\xe5\x94\xd0\xce\xb6\xad\x9d\xce\xcbj\xa8\xd0&\xee\x90\xc2\xde\x83\xe4\b\x00\x00\xaa;=E\x98\xf6\f\xb65\a`\x8b\x85\xb5\xd5\xaf\a\xac\xd4a~\xa1\x12\xeb\r\\K\xadv\xb9\tT\\\x89$v{0\xc5ek\xfa\x9c\x9f\xdb\xf0\x83\b\x00\x00\x00\xa1\xe4\xc8H\xd56\x7fr\x81\x8d\x17?\xd0txA{\xfb\xfd\x9f\x9eU\x0fG\x1c\xe3\x94\xa5\xf2\xb7F\xc9\x15fv\xd8\'\xdd:d\x04\xcd+Q\x82\xc5\xac\xbahw\xeegpV\x03\xc61\r@.f\f\x1ba[_\xe5\x03\x85\xe5'}, {0x20, '(%'}, {0x20, ':@'}, {0x20, '\'-\xbd'}, {0x20, '$+@/,'}, {0x20, ':@'}, {0x20, ':@'}, {0x20, ')+(-[/!'}, {0x20, '\x00\x00\x00'}, {0x20, '\x00'}, {0x20, '\xcf*.'}, {0x20, '^\xb2*/'}, {0x20, '/{'}]}, 0x1ac) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f00000005c0)="253754687c06d8f58187445ffe9858217350ae0bd72487386e5fed40000000f6b4ecc8a6356cee94d42a3c4dd5ca349e026febcc2c1ebe4115e66c050c2f7247149eba608ddbf64ffbc8b282129359e61be1972f2f6072457d4c7cb98443def118ac59a62d52b69007d04c019998cecc81724339b7286731d7a687f3bdeec32c7b78b1f007452ea6dad4bf1cd89f789de8994f49ccf46083685a63c5ae47b20f3b4aa06b601fc5aac8a0f41dca53cda9a75b2c75f1a0cf0a7ad2570506ac4277ce17d77c47b66dddb4efea72d981aa581effe5ef5fffea09a8117e4c93f96594ce8e94a4e6b4dd04f09c", 0xea) write(r3, &(0x7f0000000340)="bd0b95647295ec2c4661c327ea4775546f7983c7c0f9a96280802799b80211d0c0efd2d71269679564ed6b1b818949232ed85579e0156c851c9b57b59c8de47b86880e10ec8469984818b6fb911287443661fce15c634256083f1206fd4cf7800dcee45fdf4b7d7bf70ec6038ba0c26f83f0a3676c168818aed84963da6a3c6bf39f384d8374af43", 0x88) write$qrtrtun(r3, &(0x7f0000000c00)="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", 0x140) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x11}) 48.261902719s ago: executing program 1 (id=568): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x1, @default, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @default]}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24048082}, 0x48814) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {}, 0xffffff7f, {0x2, 0x0, @broadcast}}) 48.246882204s ago: executing program 32 (id=568): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x1, @default, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @default]}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24048082}, 0x48814) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {}, 0xffffff7f, {0x2, 0x0, @broadcast}}) 35.498820333s ago: executing program 4 (id=800): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x288400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x30, 0x7}, 'port0\x00', 0x54, 0x40004, 0xffffff4a, 0xeccd, 0x8, 0x9, 0x7, 0x0, 0x2, 0x2}) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000040)=[r7], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000240)={&(0x7f0000000200)=[r4, r5, r7], 0x4, 0x3}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x101, @private0, 0xfffffffb}}, 0x3, 0xd}, 0x90) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0xfeda) 35.497940551s ago: executing program 4 (id=803): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7c54}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x620b}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f00000000c0)={0xc}) pread64(r0, &(0x7f0000000040)=""/103, 0x67, 0x1) 35.3608303s ago: executing program 4 (id=804): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1400058}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xb4, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x9d, 0xd, 0x1, 0x0, "9a002f667f4134cc4e228e6ab5b74e538001be1b4022e30641b5659aa6afb998a3c502589113678cdb8f5c99c5d5b1c10950aeeb6b1a2c7581c181106a33e12be3cea598bbf8fabbc60fbbbce31277f55ff1291cc1f434def4d0016fc0bc868dcc7ff61c9748fb146c0b7039f6734539d46eef6940a83353b401b5d6f574071970a7f19ae979a17e088caa949283e3cce585963c8f1aab55e6"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x100000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000500)={0x2, 0x5}, 0x2) 34.410331574s ago: executing program 4 (id=813): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000008000000020000000c10500006d000000954a206b27"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000080)={'pim6reg1\x00'}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.341000951s ago: executing program 4 (id=814): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000ff"], 0x38}}, 0x8) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 34.340174333s ago: executing program 4 (id=817): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000480)={0x0, 0x0, 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfffffffa, "60d7f74b38433ed7bf20a5dc0dfbb554"}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x421]}}]}]}, 0x70}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x2c, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x2c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000580)={r2, 0x2, &(0x7f00000004c0)=[0x4, 0x3], &(0x7f0000000500)=[0xdbd], &(0x7f0000000540)=[0x8, 0x8, 0x786]}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000d0429bd704456ab1b6d43a97400", @ANYRES32=r11, @ANYBLOB="1000000000000000300012800b00010062726964676500002000028005001900840000000c002300080000000000000008001a0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19.31134928s ago: executing program 33 (id=817): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000480)={0x0, 0x0, 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfffffffa, "60d7f74b38433ed7bf20a5dc0dfbb554"}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x421]}}]}]}, 0x70}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x2c, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x2c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000580)={r2, 0x2, &(0x7f00000004c0)=[0x4, 0x3], &(0x7f0000000500)=[0xdbd], &(0x7f0000000540)=[0x8, 0x8, 0x786]}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000d0429bd704456ab1b6d43a97400", @ANYRES32=r11, @ANYBLOB="1000000000000000300012800b00010062726964676500002000028005001900840000000c002300080000000000000008001a0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.641299521s ago: executing program 5 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRESDEC=r0, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 5.640990975s ago: executing program 5 (id=1305): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) open_tree(r1, &(0x7f0000000340)='./file0\x00', 0x1800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x778}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100000001}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.529983907s ago: executing program 5 (id=1308): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) 5.529750866s ago: executing program 5 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x74}, @sack={0x5, 0xe, [0x6, 0x6, 0x8000]}, @timestamp={0x8, 0xa, 0x0, 0x40000000}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @timestamp={0x8, 0xa, 0x2, 0xa000}, @timestamp={0x8, 0xa, 0x4}]}}}}}}}}, 0x0) 5.461340286s ago: executing program 5 (id=1311): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1400058}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xb4, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x9d, 0xd, 0x1, 0x0, "9a002f667f4134cc4e228e6ab5b74e538001be1b4022e30641b5659aa6afb998a3c502589113678cdb8f5c99c5d5b1c10950aeeb6b1a2c7581c181106a33e12be3cea598bbf8fabbc60fbbbce31277f55ff1291cc1f434def4d0016fc0bc868dcc7ff61c9748fb146c0b7039f6734539d46eef6940a83353b401b5d6f574071970a7f19ae979a17e088caa949283e3cce585963c8f1aab55e6"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x4}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x100000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000500)={0x2, 0x5}, 0x2) 5.330519779s ago: executing program 5 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2800002, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000500006804c000400"], 0x64}}, 0x0) 3.200961258s ago: executing program 3 (id=1341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) pipe(&(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x1e, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000d40)=@filename='./bus/file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) 2.180741562s ago: executing program 3 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000041c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f00000010c0)="4267141d3d", 0x5}], 0x1, &(0x7f0000001600)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0x18, 0x40004}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001008a"], 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x6, 0x2, 0x95, 0x4, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7, 0x7800, 0x4, 0x10}}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc8000}, 0x4000000) 2.070492593s ago: executing program 3 (id=1365): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xd, "8fd5d56e2455fadc2263bc9454"}, &(0x7f0000000240)=0x31) (async) getsockopt$inet6_int(r1, 0x29, 0xd0, 0x0, &(0x7f0000000100)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000180)) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8000) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x10001) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r5, 0x25, 0x0, @void}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@deltaction={0x2d8, 0x31, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2fa4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0xfffffffffffffd49, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa0000000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'ife\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff83ce}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x2d8}}, 0x10000000) 2.011451037s ago: executing program 3 (id=1367): futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x46bb, 0x1, 0x1, "cdf922c1060000000000000000000000000023000039a8d775b8d0fed900"}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) r7 = socket$nl_route(0x10, 0x3, 0x0) keyctl$restrict_keyring(0x6, 0xfffffffffffffffc, &(0x7f0000000280)='ceph\x00', &(0x7f0000000300)='(\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x2400c080) 1.560417014s ago: executing program 3 (id=1374): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="14000000100001000000000000e1ffff0e00000a20000000120a01010001000000000000010000060900010073797a3100000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a300000000009000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a300000000009000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="8d3fb42640452d59117507000100a42c473d65b3704913f98f71802000004000", 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='f2fs_lookup_end\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='f2fs_lookup_end\x00', r4}, 0x18) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) dup(r1) (async) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000002300)="d9f264660f388107f30f09f2360f009a0048baf80c66b838cab98f66efbafc0cecf00fb09b0000baf80c66b8148f388d66efbafc0c66b87e00000066ef66b8815dd1fd66bac78eb1480f300f01cf0f2376"}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x4000, &(0x7f0000002240)=ANY=[@ANYBLOB="7472616e733d66642c72663295739414ec6100a28537fc917c7ffd65fba8f1573f9c28f747e185561e127b94a31b0c60c8a8d72c6e7c497be9f4cda2bd7ea340da579a3adf1b64b6659e4630b43798f229eab869ee8bbcdaf0048a5e7d543ef00d90421a6d915ff2aeb77184899f3f", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) 1.34081487s ago: executing program 2 (id=1379): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x4, 0x4, 0x9, 0x1, 0x0, [{0x6, 0x2, 0x0, '\x00', 0xb}]}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r5 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r5, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r4, 0x3, '\x00', "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"}}, 0x110) (async) lchown(&(0x7f0000000340)='./bus\x00', r2, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x7}], {}, [{}], {0x10, 0x7}}, 0x34, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.339811243s ago: executing program 3 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0x25, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b780e097f0000000000000009ae784c99164db8a735309a", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.27111682s ago: executing program 2 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}]}]}, 0x34}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$inet6(0xa, 0x6, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="fdff00001900000600000000000000ff"], 0x10}}], 0x2, 0x40001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c062160020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0xd7, 0xfffffffd, 0x48, @remote, @remote, 0x40, 0x7, 0xf812, 0x8}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xcb, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',posixacl,']) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x8f, &(0x7f0000000240)=""/143, 0x40f00, 0x30, '\x00', r7, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xf, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000440)=[r10, 0x1], &(0x7f0000000480)=[{0x3, 0x1, 0xd, 0xc}, {0x3, 0x4, 0x1, 0x5}, {0x3, 0x4, 0xc, 0x1}, {0x2e33563d, 0x5, 0x7, 0xc}, {0x5, 0x2, 0x3, 0x5}, {0x5, 0x1, 0xa, 0x1}], 0x10, 0x4, @void, @value}, 0x94) open(&(0x7f0000000300)='./file0\x00', 0x200000, 0x14) 1.221518602s ago: executing program 0 (id=1382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x74}, @sack={0x5, 0xe, [0x6, 0x6, 0x8000]}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @timestamp={0x8, 0xa, 0x2, 0xa020}, @timestamp={0x8, 0xa, 0x4}]}}}}}}}}, 0x0) 1.221201762s ago: executing program 0 (id=1383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) pipe(&(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000180)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f0000000240)={0x3, 0x0, 0x80000000, 0x0, 0x2, "bb401a1600000000000000000000346d00"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ddffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100007289894600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 401.25843ms ago: executing program 2 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="052000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 331.239511ms ago: executing program 2 (id=1385): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) (async) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000340), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000020000000000000f01"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000793928000000f4ff5d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 329.817494ms ago: executing program 2 (id=1386): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'YE<\xe7n0\xff\xd3[-Y\xac\x93<\xe8o\xf2\x8ew\xeb/\xed\xf4\xdb\x98\xf2\x16\xe6\xe1\xc9\x93\f\xe6\x80Z>.\xa8\x13>\xe9\xc6O1\x95$\x7f\xc4i\xda\x19\n\xc9\x1c\x85\xf00<>\x97\xb9\\\xe3\xcf\xa0\x8c\xc7\x99\x89\x97\x8e\xd4\x18\xd3@\xb2\xd4\xd1\xea\xaf\xa4p\x19\xd4\xbb\x9c\xe8\'y\x93\xd2{\x8f+\xc7\xb6&\a%}WN\xd4\x039a\xc7UG:FO\'H\xda\xa8\xa8\xa0.9D\xd8\xf1\x9e\xee\x17N\x93=\xa6\x98\xf70\xe4\xf2\x9d\xd8\xe5\x94\xc5R\x05\xc9\'B\xa6qG\xdb\xb7\xdas\x8f\x1b\xa5\x1c\x950\x90&\x0fi\xcc\xc0\xca\xeb\xe1\x98\xa4\xa1'}, {0x20, 'cpuacct.usage_sys\x00\x88\x82\xec\x18i\xd8\xdb\xc4=\x9d\x19\xc1s\xfc\t\b\xc2O\xd0t\xe4u@\xfc\x7f1 \xf7'}, {0x20, '*)\n-('}, {0x20, '\xa2W\x17\x19\x19]-\xaf.\xc5\xbc\x00\x85v\xae\x87\x1ar\x06\xc3\x82\xcb\xe9\xaa\x85\x87\xa7\xb0\xf9j\xf6\xcc\xf5J!:\x8c\xf2\xdbn\xac\xc7\xf8\xc5~.\xe9\xb0\xa7\x16\xdc\xee\x889\xa7\f\f\xb4\xf1h2\xdc\x95\xe0#'}, {}], 0xa, "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"}, 0x1032f) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfdef) 240.950292ms ago: executing program 2 (id=1387): getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1e, 0x47, 0x7fff, 0x6a, 0x0, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x74}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x80000) sendmsg$inet6(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0xa, 0x4e20, 0x35, @mcast1, 0x3ff}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="76548c636708dbe89a664b7c816205cd47f396a093f1d1c249013c7332b3a7bb73095b988d8d01b61a013efb094c1dd0ba2a59f4e0750e73ea95d5f752dcf55d46f1ac78105c3611757cbc3a0006863f70175fd87ea1e0f544990b9820e42fd5eb5cbc2fd336274d26acf5a28c4e46ffe63492e8eb63692559386e2046e54d25dcf42ef15f1e1c98ccfa5fbd72db1fbbab109cecc0d309", 0x97}, {&(0x7f0000000340)="61501c7e17f77f3e0208bc5d97daf18fcd1022fee829f24ba2844837a1785cd191719029817305d90ff49d5c3eefdd3613e4f7471e3b71c85bb25c9d1e18baa7f216f2762cd66db59cf70d53311d9a51d42850ceba3e3a9b88d73f6bd732f5c6ea4143105922", 0x66}, {&(0x7f00000003c0)="dc22b7f28186c04ffe71d6d65250eb1868", 0x11}, {&(0x7f0000000400)="6ebc150b48c0f0179e03bd348671bbd429ce5a1d8fde42fd24001ee1d6b8ce8af400ee23736ef15d8c944ec67cc934948887888c1d26a747cb6ba7a4808fa60cd9d883a0d98f532206de5191e00f031f43c118183c8ea01aff7300ec42a49bf1187ec2bfb55a5fb5592017d7d50a7bc4efb83481468f68fe3215b26204a1028b8b1c32bfbba112bb07e1e19c0104ab53dd2da53692455abbcdd24f91a168ab", 0x9f}, {&(0x7f00000004c0)="9477e4fc5ba5fcbd051528390c2dc3f8788a13a34b12d4971854b1d6d6ce93e7be094fdc3f2a02082155e054833332170e4ab2e9d533e4bcf90dffeb4b8be7eb1309be8b1b3edff8c4bfa9af4b67e666cee4052ae72c0ced9cb7855ebcc08baf36bffbb705d9245315dd296206e22e96cf6e3273e0489a930eb6cf99f1c00088bc69c711540f3b2d60e0410eebd0a84215b29ce2976abd4d3a9a2b940bc626d61745fb62863fbd20f70b0c896b8ea73f23ff213b95206af975f124d1e0c66845fe8b4bef355c8d09ce9979cfa5510c1abcbdc901773070847a0bb7", 0xdb}, {&(0x7f00000005c0)="af858e2bd42284c54423c22b7360d7130107d96cc0c128512c1f41ba1aa3e4a09877383e5676742fa7298f7f65d78ff82553d1360333425a8b3150ed018ca23187fc6698d1f8f170eec9c50ab3cff26f9b8d467b7b2bfcfad613a40d16b35e9a8b98785e673001ccb323bf01ca5c82267d76b8232cbc7345312a9a4907e051c3c4b8f740742fac5a31e5fc9055e29dac9ec2c31bb743d5414aedaec839c6811f9dd689e660a89fb6b6502f05c422cb0e5b525ce5ba96cb934ad7b5371fade51dc56f2d56f6ad3cb919e35f17bce3868d4ce62516b7d238d88fa9385f481428da4abc4b6bbf12523423272efb63e0a6", 0xef}], 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="300000000000000029000000040000003302000000000000050200070108000000000000000001070000000000000000140000000000000029000000340000000f0000000000000031cf"], 0x48}, 0x4000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20}, {0x6}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000009c0)={0x2, @win={{0x1000, 0x0, 0x3, 0x4}, 0x4, 0x9, &(0x7f0000000740)={{0x6, 0xc, 0xf57, 0x5}}, 0x6, &(0x7f0000000940)="a4123c82a621cdbcab5d2ba58762c24ef757701a2a7ddf9f5aedc731ddfe9554a1a792502c2b9fbf9d2987bc8b2bb33d1803dc67adda12c4251d52ff59768ae1b105788e7d0d0ed8bb287028f7d4cc26a814f00f84c9ed92334d28a56ed6f3aae42b6e613cdb6401531d7c71418fa2c951d5c233a5dc880993", 0x7f}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 161.338371ms ago: executing program 0 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000000008010100000000000000000100000a050003000600000006000240600600000900010073797a31000000002c000480080001400000000b08000140ffffffca080001408000000008000140ffffc2b008000140000000010900010000000000000000004c00048008000140000000040800014000000009080001400000000108000140000000030800014000000005080001400000000a0800014080000000080001400000000c080001400000003e2c0004800800034000dffffe08000140000000100800014000000007080005400000000f0800064000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x40008d8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x32c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0xde, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @cf={0x4, 0x6, {0x3, 0x82, 0x5a, 0x5}}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0xb4, {0x27, 0x1d, 0xe, "ac975f06cc1296ffff75cfb11ebfb1d10052ffa08acfd6d032c26df954a3149b62b66566f73b0592934b75347db83245d62f906cc3fb2b8b6a75f31c9254ee7efc66c43d8f9888ac131c55493e92d1f1dc77a610b01773e476c4c0c521816bf3c7f3605dcac64e1ae0b84cd3b86450f89d3734d69c7ea6045b064463c589becf25b8d070e7676e0e2a6670c32a700a243b76a2a2fb182e97cd235cbeb69911040883ff19529f5712afce07d84d35a59ef2"}}]}, @NL80211_ATTR_IE={0x90, 0x2a, [@tim={0x5, 0x8a, {0x2a, 0x90, 0x7f, "7ed1c6e0ac93f10b1ab66c99a2f56b1be74989c54c9da731627178ed87a535a0a53954fc4cb5bc6a4de0ef2eb268ea75a4f30e5ade750324bd20b6e5f51d4c67446d08bd00709ba778fbcdf244ceab595267572f8b2b136ddc7a67103dbf855f3401e8e26b9f283d3afb758ebdee48933bed0948a3c23b32e190e6d0e03e5c8a1da484c5a628c4"}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@cf={0x4, 0x6, {0x4, 0x5, 0x2, 0xbd}}, @supported_rates={0x1, 0x1, [{0x4, 0x1}]}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x0, 0x0, {0x8, 0xc, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x7}}, @chsw_timing={0x68, 0x4, {0x1000}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf8, 0x1, @broadcast, 0x40, @value, 0x5, 0x3, @broadcast, 0xd}}, @prep={0x83, 0x1f, {{}, 0x3, 0x3, @broadcast, 0x8000, @void, 0xd, 0x1, @device_a, 0x3ff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, 0x1, 0x41}}]}, @NL80211_ATTR_IE={0x8f, 0x2a, [@rann={0x7e, 0x15, {{0x1}, 0xc, 0x5, @broadcast, 0x7, 0x5, 0xb4}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0xc}}, @peer_mgmt={0x75, 0x18, {0x1, 0xfff, @val=0x4, @val=0x39, @val="3543e076719727449d2693ec8a3c9870"}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x8, 0x7, @device_a, 0x7, @value=@broadcast, 0x101, 0x2, 0x3, [{{0x1}, @broadcast, 0x100}, {{0x1}, @device_a, 0x10001}, {{}, @device_a, 0xbd}]}}, @random={0x8d, 0x10, "740f9da04b4c1ef9ec761b3b0261d2a3"}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random_vendor={0xdd, 0x65, "3af360c37071e8e29b57c0ab49e8cf611ac6a140e7c93712ff561ef29bd9b599862e828d71202726ef713ab1c2fce4d5f392db0c3efeba35c52533df5487cc229d6dfd2b75a40fc9467dca1f4d6a62648789177125ed250f666da3159d2af980078ec2fcbc"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @supported_rates={0x1, 0x7, [{0x9, 0x1}, {0x60, 0x1}, {0x24}, {0x1b, 0x1}, {0xc}, {0x48, 0x1}, {0x49, 0x1}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000001) 111.36084ms ago: executing program 0 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x88) open(&(0x7f0000000040)='.\x00', 0x230343, 0x50) r3 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x840) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) shutdown(r2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioperm(0x0, 0x7fff, 0x15f9) getegid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="0108000000002c9a4e33453ec5fa08000300", @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x24040094) 340.326µs ago: executing program 0 (id=1390): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="ee2053f07bab0030e8c7da768fb84b6992dd52fdb71afd56db09a68da14d6abd829273438b1926a639a534646a12ebc4750677129e63e092efc7d3ea2dfc6a1e57797df1b18a0014e0c7cbfe4c97dd4fb64088890599100483d9ddb14041a16cec23240f0be8953ac2e9ca2963fb0b44006f301c272d9eb3c8c06a", 0x7b, r0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 0s ago: executing program 0 (id=1391): r0 = syz_open_dev$usbfs(0x0, 0x104, 0x300) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0xe, 0x1}}, 0x1000, 0x0, &(0x7f0000000400)="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"}) (async) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0xe, 0x1}}, 0x1000, 0x0, &(0x7f0000000400)="085b46c3793b88c620dc095c71b50bcd66ecece163502a7f3c4b0dbc0c765db37784f8f36f68d8f05d8a19b5e318832f45ca6ec15d9e21d2617d17f2c332ff0cd920b10e9ac59ace8873a8fc8220d05c9df0ea97e047272e2a342a795b610002578bd482f5b6b30eade78fdc988c414480a0904c8d73e467d4a95b0dfbb9404d0546e4bfc007ab04851ce7c2d159825ef29c744cc690a68273fb8a417367c9879b8b9fbb394a2ddb43c079d350a64c80d63b41c6857a1675fab33e704cc7d1cd70747531125222d1b6c9d8392ce85b25af6941b7125bcb8377b74cd5b9f82e457b6989833b75725bb2fb849e9fa3f50274eae506143ab79ec76d26434129e8f3fcb18f91cc6b3a20e992920f0c0b52c27a5a3bddb054534745f8c4314a10a9939982204c8b9625ce12bce523c4b7454bf20460001bc1a2ca30a95cc0579f1faf94fbffd15b03a6a4b02a82c4331ad0209336644f618901cdb2de5adcba0e547ffdf5d65c0cae1c35873e39096b3489a535edfec84218a14dd6030c03b98e74abdd7fc12a5624d6fd6b951c5a54cbc50d13159e9a8f91573b30aaffa4d6362760689621a218164f675c0c2e40c5f17b69f215f4839c1915a67baea1230c7adf27b3ae2aa1b7274b939b48c9ea7f6221a8c6bc99db8fe9ccf22c4c1ddd6803a9f472d01f7bc0a37d81adbeb6976d8895547cb509ba570ec12b4bba26a69436cba59eccf77124cb0a46f8eb4e3a6a97a358155cd525047744a5376d71a82200bdf2753ccdaf25297000644929b1426ac302e551a116ba83156078b94cb7fb3b900c73541fad6cb84d36f52565a299aaa9da747eef572af60b6e2d2790fc5a434dd87cd9fadd8ae94f21aabb3acb92c5dcba6ce9d73aac372d588095fa467fc9e8012a2de06e301b09fed7efb9ef1b3dbdba754c411ec978f6387b8287e08c53d89f2ec524395f2a60e0aed8a681c4a692c450522d02e93f447a9c878689a1c6f4d2f4c698ea394f28c28e0b8a3aaf4dbf60c844fbb7159b8e203df656c5a4bfaf26eeab7b59e23bed510e140eee37ea629b90e71ce50b6726f07d38ff2afe370f30e01c71430485e904ebc48d764ce0b7a1e1df927dec3a4004f9375b9b023b6514cd8b8ee8782748fa6e0fa79e917e266d5cb7f4df0af0ade8b8b01ee3a970af3e6c6fd4dc8b2cdfc85bfd58ec5bf03d05f7585a33e8235615a31b69a6cb819da68b0410bcc26517f401c0379d07ad05c833b7b6aa32dd3195196eec84dc3c58763d8c3662d0d1053f1465b8befdc414db058a2efc2fd2e539a834af108f3bec52b5741e9c216f1da762fe47bafb5d736cd5921485c261f712be08b56190182690ba27ae39b00574ccb8d690f2be2b6c29c0f28fdb03db9dfec69b0e44c824f99ddf896f52dbeb99f9b65a50aa9069cdc23c8d450beb39761efb0eb8e5255e4aca32b28935fc5bce83fdab78c51c7aa00246d49f0d5d1a2b65b38ce89af12c086a500b8149a438cedb4dc221dbfe24e42bd066661ed1441975468ced0fa13a73983e7b32b48388725ba66f488c6b3ec52cf475292ceb4d572a8281a3ed222695dbd1eeca7efef2694f00f256d43d6fd9b30361291433070a4e6272695a9dc59f7b040066dcd3a3de95df431f2eee9f3e3ec7dea3f0e6e6327df9601db4fa8ed1882f24389ab47c09db5f0dd749ba391561d1a5cc49932dde4acff3faa2fd4835f045cf709e6f1282a1cef8d447266cd3937a91615b71de5ef562b21c10bba72c9656a160bff60cd975ee7f8b2a8186de6ee920a838cad224147c3d3addfd6908fb8860c6a5354c1925f6a28f7d8cb7229b1c5fb5737541d56b0a8335198c104d95c9dfbfd95d85ddba713dc797e8b08cd1af4bc297e532580bd2a487c59bad4bd2d64cc0495abf952889557a24fa03d6047f5a613e1baa78f093a69947c47b6fa54965b82eb1d45142ef10f8efced9c877bb646bb6b93ef662865b8e5810a383a73e924aa23b7c02795e0a11fad9c433fc32f8e071cc818b9646fd26c99f9edeabad9bbb2f1dc5ae8e7b514c78a43794c8e1895820bd0a91acf7c8b3a3ca58dfa065e1618faeaa22df0a0690024f031069a7fc7aa27ca1a79c10ba7cb0847fe21120b0f4322d761e735a1b7119d4cf823121859d9092dc4582a99e901a656ed993e308bdcaa8e7798612c4f8353a71d5de8d9ce689062c5ed72eac031f96b248ddc3cb996579e90d8d419b75f444f83a0d8758bac2b4fa83a355808190bbe14d6c5a1e9d9e837e2c0f65234e182f687087601b57ac82d1dd9136423aa08345cd08b609905d9aea2e769c0b6cb5c1647db67ae8731548dd3a04cfd7aae91cd74318823dae0fee871a4424a8378c7cf4ce540ea5b01be655f249054c19b2344c5c717865ad64f93fdc32058e8a920765cbd320d6c7a67c74ef30101e3f6f9f3a1365b7ab085612265a929e4d9df112a40ce2028ff59596b9f9845273602dc8ef7f156a0ed84e465b3686df30e96b50c2bdaaefc3a1da185ff318d478cf6ba8a657b256591f510d9bb7a58f80e74b537bcfaa39af5250f7863148790d66f67e70611badfd3b569b88ce2dd002f42a8c6945c26e25260a44d7de6f405dab309c718f91afe818b1ce8d6f7223e1ab03169a4f378c02576770a793a84ca0004c823863f9e827c18cf89cf6d434c5bfc757a6e1ea686c7c059e6f5638f9d225f8c60ef9479539c2d09b2597ab42966f939aa8a8f36445d493424793ece8ac6dd23ac7c7a5a0cfee0bdb7c7d7c9e807114b60a50dcccd9a3c80e722f6fd89fd54e0d770b1439d904797bceb7de41090e0d4867b1ceca2361c1950988e0ee2ca6ad94964b4a754c3131129833588e636d39f2fbebb10d4a7fa5cfd1f17d8406f9890a2f6d6a46abf2bea0c7ee6e6921f073a33c6f383bae79dc5c9f48ae6e4323b1a3331c348b9b3f00fb19653c4e0910b6f98fda091828a0b8f74324dee84db378aa6f7b657363575381624b398ab27780001ea3b0164c79ab8d140f1910b4fb1171ef2e333f4acdff4ee92da66d44d63bbd5716f195cfb0c7b95774248138e55579a083a4b501d2f5efacfd97d36fc66af1011c819f4ffb76cb1fc8ed2cc4272a74e714021101e457126e56f90f37c59d3aaa4f27c0f77b71dcb90eb3bed920f459831207e55c373db33ce9cc7b445497b38b2d85fdacef4d56b5d386b6ecf22ae48c80340c78334f49b04dad8825b922a262eb5af02568178705e138a5a815a2854e6c6317baae79e5ab04f70b0f9801eed6038e410e516f3390f8fe8da9908faeb6a226e444058b02b731e7fb0b343655af161ec48130d5baf49eb7b0ae37d8a578a44418f076e6132ec9040fd1b8043b67196b29153e70b3747a20b15a1e202658d1f909359e864745b99f99f7ff4f8c409a67e3929ac4868032a6b3d43a54ab1f72c4efd1264b5087844427756271bfbf62f2c9dc0c16cdce1c3ef57fa062db8092cb6ab801ca043b91ecced7c73ec5c41ea105686854fea517a29a108347d59ea3384e8284740dd28d42797ea0789a3a6e7a736161d5ad0975e29ea13d1ba6add2c3bfbf7d8a72ee61161d257f8cd38c7fe479e10b7596dc9c365af6f7f3ea69078b29df304394048280b916bccbadd62a383dba83bdec141adc96e15da578faea3c684687cd3dea6e39079bb7d8f75f856d4a45059b948b971f13a2b9c8cca1fa8b6bf5b3436eed4d2d1a1ee829d3912ab18e989645b805ab4e0a085bc334a9d25f161cd3de37a1e3e442a2cdc15d95910da88312fb258ff327e2bda9a382a8752602229295deecbd81b0c48a34e485288aec908a1d8e75666c92dbed0ce03a25d655212f8e791908a7f06dffa1817e31a918e3638ede1354a1a0cae8382ef3f75eecd268b73e2c4c84e7704b409eec8f3907fe493ecb82f70e7a5ed41a181dde247c46575182aaa14952650b2e1cc22f7213bb3648a93bdb8eda4450f374e88f90e65d381ee3edd6ac6d1f94329d3a91c883a5500dfca2b84159da0b164fbfde0f9474f836fad5e19621eb791130a680e8e85793dd8211702525fac69b65779491e57d954e4be2382044ccc45c2bb7fcebb1d30d3a494f26f2d630c06e783ff4416b3d117bf1bcfcb75da20a4a993738146e678b066e2fa0718ed2327c7800bc7551ae0e14b25676ef3316f3ff5399c739a833f84d8a7ca46d2fe79c2fad88c9407b62779e4c5879763e4adf2974f9a54eeb9391e303f439ba010f8d26f953783bdfb66aaad398b3ed999f197579c85adbf08797ef3771d3ff5821c5f76011b07f0b2d4a99c650c71f84ddcf93da7b10a801895c241f9ee896c8f2c8e7aeaf8d992a14853a833a27aa65a28215b8928a95f94eb237c3fa8f70bcf16769d04172e04a08195ee08ae432bffa52a550be3a5271f649a54070b87f375e061fbe03693fa865e206cce4278e4ba5879928e45c0e72f1f32b2be81993173cbfafc5334325cae217a13fcbd0e00892fc6e44a27731fceffbfe900b999398bb4883448473a05af534c9f1dd69a70d45ab29dcfd6d06bb564aa3a04a768a91ecdfc0a04d24322e5b77663bd7a9bf8b18116fc0d83958d812a82fa3f7a7847f990e13d24759bb6bbf72c984e6d97b5ccfd1eabb8b6021bef1b28f3ac7bf95ab42439c1eeeee5cfe831c75dbf4f283c4e256a97c889c9d0f954bd90e2cbc59fa72eab0ceff5265c93017d63d2745d904c8934a66e059a57d8ea2644ed7dcc8754edbb008b0f176686206f1630f7f76e108320656607b79df9446e5e1d7995f9093156bc32ee2b798c847cc50e2b90ae4438c23e1ed757cfadfae8b41a77301d39b98fb82b874426cab0fd718019587b2ab6e5de957fbc7cb1bef1443f80c2aba13a94b2e23b20ca5f526f5d371a2ba7e11cd7929c46d5cf7eed3b7da62028ea2d3e110a1708f528450a59686d86bbb5756480a789c39d5053c96c0b661c97fef4c8689afb519a596ea8e99eca0ae052789e3a74a0a5bc723f7c6e0f82458674e8e4b49eb7801b1d0cc0665e6b1b6f2ac9e419636e5279690f6d0a7f17f62226b6012033146c918008634973288a3fba4d99b5ea9734e3df95b141aca77e147e891ee8d9ddf1b385ce73976fc01c575678ec45479638be2fdff513e62370fd798a6ff921807e086a7292e0c35a8f71d3c6027efe7d3d7e340f4ed676a397982fdac2a3bd36e87a091801931c66952d9a355b1518e0c4e6e911ee3d3d2a87152781a153f9f5b3746cfe57acf9e282acc240db9f90968752302ef9a66668cf1d91985308c7c930315c2daf49f9c02f04e33296d0af5fd7e0243787bd07f9f6c82f717050e3dbbc204b71dddd58b8742d212ebbacb2c27e7169491e81ea5863347c06f0c272bbeaab6bd58c0b7be61cc65adf9b82846587fbc081a70a6af5c3b48df8c5fe2e45a1756f2075d0c7e9b3eee3a7cd0d3db6b9fa22ba8b6d78fd90c2294b2ed6ea6032fbafc6c249801a4f23e16b97caa19fd00d9290e76733dbc9770b8aa2be24367c089651a742d3254bad4baee507c1bb4a4ef1cf2033d39f201f18f2610f5ef3939a01458cb2b8eb0137d4b91f6911b2d14042e34e46709a331c7277e06ba017f83b6d0971047e3511f535aab206ba01ad516db15cb5ca73887bb603a797d28ec200dec4abbeb481f97d51da5a9127af210fef4706635470f03c3e9cc25efc36a3feaad524f94d214261f2e6675ef6539838e20a73121ce98b1fce5bb37e8eede338d0bbb87bc904741b1598ee935ec981aa2a491109b19c1f06e388e0a5998d6aa04"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x6, 0x8000000000000000}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000200)={0x3311, 0x7, "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000000b0108000000000000000000000006190001002f6465762f6275732f7573622f3030232f30302300000000080002400000000108000340000000014c20b53a089121b62a46ff4b98ce9d26373a9f30d4d24bb8ef082a21f69627b09c570c8b1eb6cf8f5a23e11426567a702160249573aad86b1684de1613f4b2a0b3c1727348791bad1c0430ec1120b25951b71ef66df87f3baaa790d2d776d9"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socket$inet6(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fchdir(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x1d}}) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x5, 0x2, {}, 0x58603}) (async) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x5, 0x2, {}, 0x58603}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0xf52ebe5498d0c0cd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0xf52ebe5498d0c0cd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): rose0): Error: Device is in use and cannot be enslaved [ 86.350527][ T7991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7991 comm=syz.0.634 [ 86.402672][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.413211][ T9] dvb-usb: error -22 while querying for an remote control event. [ 86.586056][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 86.586068][ T39] audit: type=1400 audit(1736315564.408:597): avc: denied { associate } for pid=8000 comm="syz.0.638" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.633280][ T5934] Bluetooth: hci2: command tx timeout [ 86.713852][ T8007] tipc: Started in network mode [ 86.715300][ T8007] tipc: Node identity ac14140f, cluster identity 4711 [ 86.718116][ T8007] tipc: New replicast peer: 255.255.255.255 [ 86.720087][ T8007] tipc: Enabled bearer , priority 10 [ 86.723657][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 86.725532][ T832] dvb-usb: error -22 while querying for an remote control event. [ 86.760687][ T39] audit: type=1400 audit(1736315564.578:598): avc: denied { setattr } for pid=8008 comm="syz.4.642" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.767664][ T8009] binder: 8008:8009 ioctl 40086602 20000300 returned -22 [ 86.770358][ T8009] dccp_v6_rcv: dropped packet with invalid checksum [ 86.774172][ T8009] binder: 8008:8009 ioctl c0306201 200004c0 returned -22 [ 86.777926][ T8009] binder: 8008:8009 unknown command 0 [ 86.779500][ T8009] binder: 8008:8009 ioctl c0306201 20004a40 returned -22 [ 87.004634][ T832] tipc: Node number set to 2886997007 [ 87.033274][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 87.035642][ T832] dvb-usb: error -22 while querying for an remote control event. [ 87.177538][ T8040] usb usb7: usbfs: process 8040 (syz.4.652) did not claim interface 0 before use [ 87.240393][ T8045] syz.2.649: attempt to access beyond end of device [ 87.240393][ T8045] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 87.244849][ T8045] syz.2.649: attempt to access beyond end of device [ 87.244849][ T8045] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 87.248530][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.251280][ T8045] syz.2.649: attempt to access beyond end of device [ 87.251280][ T8045] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 87.257211][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.261568][ T8045] syz.2.649: attempt to access beyond end of device [ 87.261568][ T8045] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 87.267505][ T8045] syz.2.649: attempt to access beyond end of device [ 87.267505][ T8045] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 87.274693][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.278379][ T8045] syz.2.649: attempt to access beyond end of device [ 87.278379][ T8045] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 87.284132][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.288094][ T8045] syz.2.649: attempt to access beyond end of device [ 87.288094][ T8045] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 87.292282][ T8045] syz.2.649: attempt to access beyond end of device [ 87.292282][ T8045] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 87.296830][ T8041] nbd2: detected capacity change from 0 to 67108884 [ 87.301788][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.307945][ T8045] block nbd2: Send control failed (result -89) [ 87.310719][ T8045] block nbd2: Request send failed, requeueing [ 87.315421][ T5934] block nbd2: Receive control failed (result -32) [ 87.316454][ T2388] block nbd2: Dead connection, failed to find a fallback [ 87.320555][ T2388] block nbd2: shutting down sockets [ 87.322124][ T2388] blk_print_req_error: 37 callbacks suppressed [ 87.322134][ T2388] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.327484][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 87.327699][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.330194][ T8045] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.336137][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 87.336170][ T5924] buffer_io_error: 34 callbacks suppressed [ 87.336179][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.338893][ T8045] I/O error, dev nbd2, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.341319][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.348125][ T8045] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.348911][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 87.351182][ T8045] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 87.354913][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.355704][ T832] dvb-usb: error -22 while querying for an remote control event. [ 87.357872][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.363895][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.366339][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.369087][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.371494][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.377154][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.379523][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.383176][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.385625][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.388453][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.392886][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.395501][ T5924] ldm_validate_partition_table(): Disk read failed. [ 87.397619][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.400262][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.404336][ T5924] Dev nbd2: unable to read RDB block 0 [ 87.406759][ T5924] nbd2: unable to read partition table [ 87.410027][ T5924] ldm_validate_partition_table(): Disk read failed. [ 87.415454][ T5924] Dev nbd2: unable to read RDB block 0 [ 87.417682][ T5924] nbd2: unable to read partition table [ 87.532678][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 87.638231][ T8062] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 87.642100][ T8062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz.0.658 [ 87.663261][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 87.665152][ T832] dvb-usb: error -22 while querying for an remote control event. [ 87.703803][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 87.707949][ T35] usb 7-1: config 9 has an invalid interface number: 28 but max is 3 [ 87.710902][ T35] usb 7-1: config 9 has an invalid interface number: 193 but max is 3 [ 87.714171][ T35] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 87.717239][ T35] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 87.720124][ T35] usb 7-1: config 9 has no interface number 0 [ 87.723847][ T35] usb 7-1: config 9 has no interface number 1 [ 87.725895][ T35] usb 7-1: config 9 interface 28 altsetting 9 endpoint 0x7 has invalid maxpacket 407, setting to 64 [ 87.729500][ T35] usb 7-1: config 9 interface 28 altsetting 9 bulk endpoint 0xF has invalid maxpacket 16 [ 87.732516][ T35] usb 7-1: config 9 interface 28 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 87.732732][ T8066] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 87.736412][ T1760] tipc: Node number set to 2886997007 [ 87.741731][ T35] usb 7-1: config 9 interface 28 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 87.745588][ T35] usb 7-1: config 9 interface 28 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 87.748746][ T35] usb 7-1: config 9 interface 28 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 87.751860][ T35] usb 7-1: config 9 interface 28 altsetting 9 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.754980][ T35] usb 7-1: config 9 interface 28 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 87.758218][ T35] usb 7-1: config 9 interface 28 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 87.761179][ T35] usb 7-1: config 9 interface 193 altsetting 4 has an endpoint descriptor with address 0x66, changing to 0x6 [ 87.764737][ T35] usb 7-1: config 9 interface 193 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 87.767732][ T35] usb 7-1: config 9 interface 193 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 87.770729][ T35] usb 7-1: config 9 interface 193 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 87.773792][ T35] usb 7-1: config 9 interface 193 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 87.776793][ T35] usb 7-1: config 9 interface 193 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 87.779834][ T35] usb 7-1: config 9 interface 193 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 87.783525][ T35] usb 7-1: config 9 interface 28 has no altsetting 0 [ 87.785373][ T35] usb 7-1: config 9 interface 193 has no altsetting 0 [ 87.788891][ T35] usb 7-1: Dual-Role OTG device on HNP port [ 87.790891][ T35] usb 7-1: New USB device found, idVendor=0733, idProduct=3261, bcdDevice=bc.21 [ 87.794431][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.796771][ T35] usb 7-1: Product: ш [ 87.797998][ T35] usb 7-1: Manufacturer: ꕸì’㘯ꎻ䎄욖⛜攪懾帞鞰璴峧䰴窡皲듛〧֠꥽සï¤é¸¬í™¾é›©å‘´è¼é­•ç¦¢î³·é¯Žì–¹à¥©å£â ¦å¬¡ë¨¯á¡¦â˜³ï¹·å†£è±é’’⃑㞔哙뎿ន㯗蹣⹙듬ዷ삣℈ê°ì½·å–ì”­í…¼î‰á”‰î½”ⅶᧅ閎洒䘬覔䯾噲ì¡ëŒ®éº’鯃콇︡ [ 87.805297][ T35] usb 7-1: SerialNumber: 꼄ᴺ墛赉ìŽâ·Šá´‡ê•áˆ“䗪탣㆟説뭖å‹åµ¸Ú¨áˆ„æ´«î®­ê©å‚½á¼µç»‡è‚„衃굒컿뢗૿뒀î䤉箔è¦â“½éµ·ã°ä‹ã‹Šç’£å¥³ç—œê£‰î³í‰Ÿå’™íƒ§ä®¦à©“æ¾íŠ‡á¿›á±¡ì”„矬抙贽ì¹æªªè”µí™èº¨â…¿è©“饩ꔙ뺒뎻듟㡵䙯ą鹓碮裡笾呭ꛓ꠷㻤ᙔ⮵壵﨨竷센ជ㮉奿瀦é€ì˜™è…±è·â›¾ë±µ [ 87.820419][ T8048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.823004][ T8048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.908211][ T8077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.915810][ T8077] infiniband s–z1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.945592][ T39] audit: type=1400 audit(1736315565.768:599): avc: denied { listen } for pid=8074 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.947598][ T8075] nfs4: Bad value for 'source' [ 87.982751][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 87.984969][ T832] dvb-usb: error -22 while querying for an remote control event. [ 88.036992][ T8085] afs: Unknown parameter 'dyn ' [ 88.040227][ T35] usb 7-1: USB disconnect, device number 11 [ 88.063672][ T8091] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 88.067029][ T8091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8091 comm=syz.4.668 [ 88.183932][ T39] audit: type=1326 audit(1736315566.008:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.4.669" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe54985d29 code=0x0 [ 88.224157][ T8096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.670'. [ 88.228138][ T39] audit: type=1400 audit(1736315566.048:601): avc: denied { lock } for pid=8095 comm="syz.3.670" path="socket:[26098]" dev="sockfs" ino=26098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 88.231157][ T8096] syz.3.670: attempt to access beyond end of device [ 88.231157][ T8096] loop3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 88.241640][ T8096] qnx6: unable to read the first superblock [ 88.243562][ T8096] syz.3.670: attempt to access beyond end of device [ 88.243562][ T8096] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 88.247240][ T8096] qnx6: unable to read the first superblock [ 88.248985][ T8096] qnx6: unable to read the first superblock [ 88.253479][ T8096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8096 comm=syz.3.670 [ 88.290958][ T8099] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 88.303732][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 88.305356][ T832] dvb-usb: error -22 while querying for an remote control event. [ 88.371401][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 88.375020][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 88.612618][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 88.612633][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 88.614317][ T832] dvb-usb: error -22 while querying for an remote control event. [ 88.704500][ T5934] Bluetooth: hci2: command tx timeout [ 88.771968][ T35] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.775490][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.778469][ T35] usb 8-1: Product: syz [ 88.780031][ T35] usb 8-1: Manufacturer: syz [ 88.781857][ T35] usb 8-1: SerialNumber: syz [ 88.793786][ T35] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.807136][ T1760] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.923650][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 88.926004][ T832] dvb-usb: error -22 while querying for an remote control event. [ 88.976993][ T8118] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 88.980236][ T8118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8118 comm=syz.2.677 [ 89.012148][ T5972] usb 8-1: USB disconnect, device number 5 [ 89.163660][ T8126] netlink: 164 bytes leftover after parsing attributes in process `syz.2.680'. [ 89.233202][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 89.235023][ T832] dvb-usb: error -22 while querying for an remote control event. [ 89.264981][ T8129] program syz.2.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.552747][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 89.555024][ T832] dvb-usb: error -22 while querying for an remote control event. [ 89.720365][ T8132] ipt_REJECT: TCP_RESET invalid for non-tcp [ 89.833354][ T1760] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 89.838855][ T1760] ath9k_htc: Failed to initialize the device [ 89.841018][ T5972] usb 8-1: ath9k_htc: USB layer deinitialized [ 89.842765][ T8134] netlink: 164 bytes leftover after parsing attributes in process `syz.0.683'. [ 89.863165][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 89.864963][ T832] dvb-usb: error -22 while querying for an remote control event. [ 90.077092][ T8145] ax25_connect(): syz.2.687 uses autobind, please contact jreuter@yaina.de [ 90.172656][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 90.174783][ T832] dvb-usb: error -22 while querying for an remote control event. [ 90.342693][ T3325] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 90.414229][ T39] audit: type=1400 audit(1736315568.238:602): avc: denied { watch } for pid=8155 comm="syz.0.691" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.482638][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 90.484538][ T832] dvb-usb: error -22 while querying for an remote control event. [ 90.504069][ T3325] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.506376][ T3325] usb 7-1: config 0 has no interface number 0 [ 90.508145][ T3325] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.511150][ T3325] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 90.514369][ T3325] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 90.517576][ T3325] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 90.518630][ T8163] FAULT_INJECTION: forcing a failure. [ 90.518630][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 90.520632][ T3325] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 90.520645][ T3325] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.520667][ T3325] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.526889][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.0.694 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 90.527334][ T3325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.530801][ T8163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.534690][ T3325] usb 7-1: config 0 descriptor?? [ 90.536367][ T8163] Call Trace: [ 90.536373][ T8163] [ 90.539041][ T8145] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.541643][ T8163] dump_stack_lvl+0x16c/0x1f0 [ 90.547009][ T3325] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 90.548339][ T8163] should_fail_ex+0x497/0x5b0 [ 90.552603][ T8163] ? fs_reclaim_acquire+0xae/0x150 [ 90.554049][ T8163] should_failslab+0xc2/0x120 [ 90.555397][ T8163] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 90.556953][ T8163] ? mas_alloc_nodes+0x18b/0x8b0 [ 90.558412][ T8163] mas_alloc_nodes+0x18b/0x8b0 [ 90.559844][ T8163] mas_node_count_gfp+0x105/0x130 [ 90.561326][ T8163] mas_preallocate+0x53f/0xce0 [ 90.562761][ T8163] ? __pfx_mas_preallocate+0x10/0x10 [ 90.564296][ T8163] ? anon_vma_name+0x75/0x100 [ 90.565638][ T8163] __split_vma+0x474/0x1160 [ 90.566948][ T8163] ? __pfx___split_vma+0x10/0x10 [ 90.568379][ T8163] ? vm_mmap_pgoff+0xdb/0x360 [ 90.569757][ T8163] vms_gather_munmap_vmas+0x38b/0x1730 [ 90.571343][ T8163] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 90.573039][ T8163] ? mas_walk+0x6a6/0x910 [ 90.574297][ T8163] __mmap_region+0x32c/0x2760 [ 90.575667][ T8163] ? __pfx___mmap_region+0x10/0x10 [ 90.577136][ T8163] ? hlock_class+0x4e/0x130 [ 90.578458][ T8163] ? mark_lock+0xb5/0xc60 [ 90.579774][ T8163] ? process_measurement+0x1e8/0x2370 [ 90.581375][ T8163] ? __pfx_process_measurement+0x10/0x10 [ 90.583164][ T8163] ? cap_mmap_addr+0x53/0x320 [ 90.584756][ T8163] mmap_region+0x127/0x320 [ 90.586121][ T8163] do_mmap+0xa09/0x1050 [ 90.587374][ T8163] vm_mmap_pgoff+0x1ba/0x360 [ 90.588747][ T8163] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 90.590259][ T8163] ? __fget_files+0x206/0x3a0 [ 90.591682][ T8163] ksys_mmap_pgoff+0x32c/0x5c0 [ 90.593108][ T8163] ? __pfx_ksys_write+0x10/0x10 [ 90.594549][ T8163] __x64_sys_mmap+0x125/0x190 [ 90.595959][ T8163] do_syscall_64+0xcd/0x250 [ 90.597316][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.599092][ T8163] RIP: 0033:0x7f8dbb785d29 [ 90.600441][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.605935][ T8163] RSP: 002b:00007f8dbc592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 90.608335][ T8163] RAX: ffffffffffffffda RBX: 00007f8dbb975fa0 RCX: 00007f8dbb785d29 [ 90.610603][ T8163] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 90.612946][ T8163] RBP: 00007f8dbc592090 R08: 0000000000000004 R09: 0000000000000000 [ 90.615200][ T8163] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 90.617460][ T8163] R13: 0000000000000000 R14: 00007f8dbb975fa0 R15: 00007ffd4dfdb878 [ 90.619772][ T8163] [ 90.678121][ T8169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 90.680597][ T39] audit: type=1400 audit(1736315568.498:603): avc: denied { ioctl } for pid=8170 comm="syz.3.697" path="socket:[26295]" dev="sockfs" ino=26295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.736284][ T8176] xt_hashlimit: size too large, truncated to 1048576 [ 90.753918][ T8145] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 90.782853][ T5934] Bluetooth: hci2: command tx timeout [ 90.795529][ T832] dvb-usb: bulk message failed: -22 (1/0) [ 90.797234][ T832] dvb-usb: error -22 while querying for an remote control event. [ 90.855392][ T5972] usb 7-1: USB disconnect, device number 12 [ 90.860176][ T5972] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 90.865547][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.698'. [ 90.898433][ T8189] netlink: 10 bytes leftover after parsing attributes in process `syz.0.699'. [ 91.102863][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 91.104517][ T9] dvb-usb: error -22 while querying for an remote control event. [ 91.422825][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 91.424454][ T9] dvb-usb: error -22 while querying for an remote control event. [ 91.433145][ T8212] netlink: 32 bytes leftover after parsing attributes in process `syz.3.708'. [ 91.459041][ T39] audit: type=1400 audit(1736315569.278:604): avc: denied { read } for pid=8213 comm="syz.2.710" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.470589][ T39] audit: type=1400 audit(1736315569.278:605): avc: denied { read } for pid=8215 comm="syz.3.711" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.477633][ T39] audit: type=1400 audit(1736315569.288:606): avc: denied { open } for pid=8215 comm="syz.3.711" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.521487][ T8219] KVM: debugfs: duplicate directory 8219-4 [ 91.528811][ T8219] mmap: syz.2.712 (8219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.623181][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 91.623191][ T39] audit: type=1400 audit(1736315569.448:612): avc: denied { watch_reads } for pid=8223 comm="syz.4.714" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.668212][ T39] audit: type=1400 audit(1736315569.488:613): avc: denied { listen } for pid=8239 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.672319][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 91.675480][ T39] audit: type=1400 audit(1736315569.488:614): avc: denied { connect } for pid=8239 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.700597][ T8242] netlink: 76 bytes leftover after parsing attributes in process `syz.3.719'. [ 91.729159][ T39] audit: type=1400 audit(1736315569.548:615): avc: denied { create } for pid=8251 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.735923][ T39] audit: type=1400 audit(1736315569.548:616): avc: denied { getopt } for pid=8251 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.742704][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 91.744757][ T9] dvb-usb: error -22 while querying for an remote control event. [ 91.760739][ T8258] ./bus: Can't lookup blockdev [ 91.762329][ T39] audit: type=1400 audit(1736315569.578:617): avc: denied { mounton } for pid=8257 comm="syz.3.725" path="/166/bus" dev="tmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 91.784952][ T8263] input: syz1 as /devices/virtual/input/input12 [ 91.793588][ T39] audit: type=1400 audit(1736315569.618:618): avc: denied { mount } for pid=8259 comm="syz.4.726" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.864100][ T8274] FAULT_INJECTION: forcing a failure. [ 91.864100][ T8274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.867787][ T8274] CPU: 3 UID: 0 PID: 8274 Comm: syz.2.732 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 91.870782][ T8274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.873814][ T8274] Call Trace: [ 91.874772][ T8274] [ 91.875618][ T8274] dump_stack_lvl+0x16c/0x1f0 [ 91.876995][ T8274] should_fail_ex+0x497/0x5b0 [ 91.878359][ T8274] _copy_to_user+0x32/0xd0 [ 91.879772][ T8274] simple_read_from_buffer+0xd0/0x160 [ 91.881277][ T8274] proc_fail_nth_read+0x198/0x270 [ 91.883152][ T8274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.885325][ T8274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.887436][ T8274] vfs_read+0x1df/0xbe0 [ 91.889043][ T8274] ? __fget_files+0x1fc/0x3a0 [ 91.890918][ T8274] ? __pfx___mutex_lock+0x10/0x10 [ 91.892919][ T8274] ? __pfx_vfs_read+0x10/0x10 [ 91.894772][ T8274] ? __fget_files+0x206/0x3a0 [ 91.896679][ T8274] ksys_read+0x12b/0x250 [ 91.898373][ T8274] ? __pfx_ksys_read+0x10/0x10 [ 91.900292][ T8274] do_syscall_64+0xcd/0x250 [ 91.902122][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.904457][ T8274] RIP: 0033:0x7fc867d8473c [ 91.906244][ T8274] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.913755][ T8274] RSP: 002b:00007fc868c1a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.917119][ T8274] RAX: ffffffffffffffda RBX: 00007fc867f75fa0 RCX: 00007fc867d8473c [ 91.920292][ T8274] RDX: 000000000000000f RSI: 00007fc868c1a0a0 RDI: 0000000000000003 [ 91.923493][ T8274] RBP: 00007fc868c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 91.926655][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.929861][ T8274] R13: 0000000000000000 R14: 00007fc867f75fa0 R15: 00007ffdbadef328 [ 91.933066][ T8274] [ 91.934461][ C3] vkms_vblank_simulate: vblank timer overrun [ 92.062884][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 92.064411][ T9] dvb-usb: error -22 while querying for an remote control event. [ 92.237580][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 92.262762][ T3325] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 92.278763][ T8298] binder: BINDER_SET_CONTEXT_MGR already set [ 92.280581][ T8298] binder: 8297:8298 ioctl 4018620d 20004a80 returned -16 [ 92.283611][ T8298] binder: BINDER_SET_CONTEXT_MGR already set [ 92.285872][ T8298] binder: 8297:8298 ioctl 4018620d 20000180 returned -16 [ 92.372663][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 92.374305][ T9] dvb-usb: error -22 while querying for an remote control event. [ 92.444049][ T3325] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 92.446653][ T3325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.448877][ T3325] usb 7-1: Product: syz [ 92.450103][ T3325] usb 7-1: Manufacturer: syz [ 92.451482][ T3325] usb 7-1: SerialNumber: syz [ 92.455880][ T3325] usb 7-1: config 0 descriptor?? [ 92.662278][ T1760] usb 7-1: USB disconnect, device number 13 [ 92.692967][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 92.695269][ T9] dvb-usb: error -22 while querying for an remote control event. [ 92.760809][ T8315] tmpfs: Unknown parameter 'ZÛR^MÝkC¨ÃñhÐònr_inodes' [ 92.778116][ T39] audit: type=1400 audit(1736315570.598:619): avc: denied { append } for pid=8317 comm="syz.3.750" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.782443][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 92.785205][ T39] audit: type=1400 audit(1736315570.598:620): avc: denied { map } for pid=8317 comm="syz.3.750" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.793383][ T39] audit: type=1400 audit(1736315570.598:621): avc: denied { write execute } for pid=8317 comm="syz.3.750" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.846125][ T8320] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 92.911213][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 92.969024][ T8329] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.002694][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 93.004442][ T9] dvb-usb: error -22 while querying for an remote control event. [ 93.117539][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 93.120050][ T8336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.753'. [ 93.179762][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.188936][ T8338] program syz.3.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.322767][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 93.325009][ T9] dvb-usb: error -22 while querying for an remote control event. [ 93.359551][ T8366] ebt_limit: overflow, try lower: 570423552/2483027968 [ 93.366317][ T8366] overlay: Unknown parameter 'euid' [ 93.374243][ T8351] nbd4: detected capacity change from 0 to 67108884 [ 93.377139][ T6348] block nbd4: Send control failed (result -89) [ 93.379193][ T6348] block nbd4: Request send failed, requeueing [ 93.381011][ T5934] block nbd4: Receive control failed (result -32) [ 93.381248][ T8351] block nbd4: shutting down sockets [ 93.385350][ T51] blk_print_req_error: 27 callbacks suppressed [ 93.385358][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.389968][ T51] buffer_io_error: 23 callbacks suppressed [ 93.389977][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.394716][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.397287][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.400035][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.403004][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.414901][ T1197] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.417671][ T1197] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.420913][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.423593][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.425761][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.428253][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.430410][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.433361][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.435488][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.437936][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.440044][ T6348] ldm_validate_partition_table(): Disk read failed. [ 93.441893][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.444944][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.447570][ T6348] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.451835][ T6348] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.454307][ T6348] Dev nbd4: unable to read RDB block 0 [ 93.456660][ T6348] nbd4: unable to read partition table [ 93.460485][ T6348] ldm_validate_partition_table(): Disk read failed. [ 93.462484][ T6348] Dev nbd4: unable to read RDB block 0 [ 93.464312][ T6348] nbd4: unable to read partition table [ 93.476925][ T8351] ldm_validate_partition_table(): Disk read failed. [ 93.482807][ T8351] Dev nbd4: unable to read RDB block 0 [ 93.484631][ T8351] nbd4: unable to read partition table [ 93.489005][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 93.491757][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 93.494942][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 93.497976][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 93.500896][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 93.504348][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 93.507300][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 93.510289][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 93.513287][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 93.516405][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 93.519315][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 93.523389][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 93.526681][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 93.529505][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 93.532390][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 93.535549][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 93.538491][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 93.541507][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 93.544706][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 93.547630][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 93.550505][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 93.553620][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 93.556504][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 93.559349][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 93.562699][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 93.565281][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 93.568139][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 93.571266][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 93.575125][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 93.577979][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 93.580753][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 93.582225][ T8396] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 93.583756][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 93.583829][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 93.583896][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 93.583962][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 93.584711][ T8351] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 93.600640][ T8351] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 93.642857][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 93.644549][ T9] dvb-usb: error -22 while querying for an remote control event. [ 93.684491][ T8400] overlay: filesystem on ./bus not supported [ 93.689237][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8400 comm=syz.4.777 [ 93.842987][ T1760] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 93.952880][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 93.955162][ T9] dvb-usb: error -22 while querying for an remote control event. [ 94.014449][ T1760] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.017634][ T1760] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 94.020774][ T1760] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.023940][ T1760] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.027376][ T1760] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.029807][ T1760] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.036418][ T1760] usb 8-1: config 0 descriptor?? [ 94.038526][ T8396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.126363][ T8424] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 94.130212][ T8424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8424 comm=syz.2.784 [ 94.190494][ T8425] misc userio: The device must be registered before sending interrupts [ 94.218401][ T8427] FAULT_INJECTION: forcing a failure. [ 94.218401][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 94.221940][ T8427] CPU: 0 UID: 0 PID: 8427 Comm: syz.2.785 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 94.225017][ T8427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.228111][ T8427] Call Trace: [ 94.229059][ T8427] [ 94.229894][ T8427] dump_stack_lvl+0x16c/0x1f0 [ 94.231412][ T8427] should_fail_ex+0x497/0x5b0 [ 94.232803][ T8427] ? fs_reclaim_acquire+0xae/0x150 [ 94.234298][ T8427] should_failslab+0xc2/0x120 [ 94.235687][ T8427] __kmalloc_noprof+0xcb/0x510 [ 94.237058][ T8427] ? rcu_is_watching+0x12/0xc0 [ 94.238380][ T8427] tomoyo_encode2+0x100/0x3e0 [ 94.239758][ T8427] tomoyo_encode+0x29/0x50 [ 94.241012][ T8427] tomoyo_realpath_from_path+0x19d/0x720 [ 94.242589][ T8427] ? tomoyo_path_number_perm+0x235/0x590 [ 94.244247][ T8427] tomoyo_path_number_perm+0x248/0x590 [ 94.245743][ T8427] ? tomoyo_path_number_perm+0x235/0x590 [ 94.247361][ T8427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.249104][ T8427] ? __pfx_lock_release+0x10/0x10 [ 94.250473][ T8427] ? trace_lock_acquire+0x14e/0x1f0 [ 94.252353][ T8427] ? lock_acquire+0x2f/0xb0 [ 94.253786][ T8427] ? __fget_files+0x40/0x3a0 [ 94.255103][ T8427] ? __fget_files+0x206/0x3a0 [ 94.256543][ T8427] security_file_ioctl+0x9b/0x240 [ 94.258419][ T8427] __x64_sys_ioctl+0xb7/0x200 [ 94.260216][ T8427] do_syscall_64+0xcd/0x250 [ 94.261791][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.263490][ T8427] RIP: 0033:0x7fc867d85d29 [ 94.264777][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.271662][ T8427] RSP: 002b:00007fc868c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.273970][ T8427] RAX: ffffffffffffffda RBX: 00007fc867f75fa0 RCX: 00007fc867d85d29 [ 94.276191][ T8427] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004 [ 94.278412][ T8427] RBP: 00007fc868c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 94.280606][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.282807][ T8427] R13: 0000000000000000 R14: 00007fc867f75fa0 R15: 00007ffdbadef328 [ 94.285012][ T8427] [ 94.286971][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 94.287265][ T8427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.288721][ T9] dvb-usb: error -22 while querying for an remote control event. [ 94.499870][ T8433] __nla_validate_parse: 5 callbacks suppressed [ 94.499881][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 94.508616][ T8433] netlink: 'syz.2.787': attribute type 29 has an invalid length. [ 94.513560][ T8433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.787'. [ 94.594465][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 94.596246][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 94.682266][ T8435] FAULT_INJECTION: forcing a failure. [ 94.682266][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 94.686167][ T8435] CPU: 1 UID: 0 PID: 8435 Comm: syz.4.788 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 94.689483][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.692704][ T8435] Call Trace: [ 94.693683][ T8435] [ 94.694554][ T8435] dump_stack_lvl+0x16c/0x1f0 [ 94.695939][ T8435] should_fail_ex+0x497/0x5b0 [ 94.697364][ T8435] ? fs_reclaim_acquire+0xae/0x150 [ 94.698829][ T8435] should_failslab+0xc2/0x120 [ 94.700294][ T8435] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 94.701855][ T8435] ? vma_merge_new_range+0x3f0/0xb70 [ 94.703444][ T8435] ? vm_area_alloc+0x1f/0x230 [ 94.704873][ T8435] vm_area_alloc+0x1f/0x230 [ 94.706200][ T8435] __mmap_region+0x1091/0x2760 [ 94.707708][ T8435] ? __pfx___mmap_region+0x10/0x10 [ 94.708098][ T1760] usbhid 8-1:0.0: can't add hid device: -71 [ 94.709178][ T8435] ? hlock_class+0x4e/0x130 [ 94.710965][ T1760] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 94.712251][ T8435] ? mark_lock+0xb5/0xc60 [ 94.712271][ T8435] ? process_measurement+0x1e8/0x2370 [ 94.712308][ T8435] ? cap_mmap_addr+0x53/0x320 [ 94.715954][ T1760] usb 8-1: USB disconnect, device number 6 [ 94.716022][ T8435] mmap_region+0x127/0x320 [ 94.722276][ T8435] do_mmap+0xa09/0x1050 [ 94.723585][ T8435] vm_mmap_pgoff+0x1ba/0x360 [ 94.724966][ T8435] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 94.726594][ T8435] ? __fget_files+0x206/0x3a0 [ 94.728004][ T8435] ksys_mmap_pgoff+0x32c/0x5c0 [ 94.729492][ T8435] ? __pfx_ksys_write+0x10/0x10 [ 94.731005][ T8435] __x64_sys_mmap+0x125/0x190 [ 94.732544][ T8435] do_syscall_64+0xcd/0x250 [ 94.733923][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.735751][ T8435] RIP: 0033:0x7efe54985d29 [ 94.737134][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.742719][ T8435] RSP: 002b:00007efe55832038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.745122][ T8435] RAX: ffffffffffffffda RBX: 00007efe54b75fa0 RCX: 00007efe54985d29 [ 94.747387][ T8435] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 94.749580][ T8435] RBP: 00007efe55832090 R08: 0000000000000004 R09: 0000000000000000 [ 94.752502][ T8435] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 94.754896][ T8435] R13: 0000000000000000 R14: 00007efe54b75fa0 R15: 00007ffc04435ab8 [ 94.757168][ T8435] [ 94.844370][ T8448] VFS: could not find a valid V7 on nullb0. [ 94.885217][ T8455] binder: 8454:8455 ioctl c0306201 200001c0 returned -14 [ 94.887679][ T8455] binder: 8454:8455 unknown command 0 [ 94.889205][ T8455] binder: 8454:8455 ioctl c0306201 20004a40 returned -22 [ 94.893347][ T8444] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 94.902628][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 94.904449][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 94.955134][ T8459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=8459 comm=syz.0.798 [ 95.104500][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 95.212771][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 95.214884][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 95.266337][ T8476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8476 comm=syz.4.804 [ 95.329073][ T8477] misc userio: The device must be registered before sending interrupts [ 95.532668][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 95.536407][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 95.842651][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 95.844395][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 96.030873][ T8466] netlink: 'syz.2.802': attribute type 5 has an invalid length. [ 96.036266][ T8475] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 96.072351][ T8481] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 96.078898][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.086106][ T8481] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.112022][ T8488] fuse: Unknown parameter '' [ 96.153514][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 96.155272][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 96.162860][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 96.176036][ T8498] bond0: (slave wlan1): Releasing backup interface [ 96.196593][ T8501] netlink: 164 bytes leftover after parsing attributes in process `syz.0.815'. [ 96.228426][ T8509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.228799][ T8507] bond0: entered promiscuous mode [ 96.248478][ T8507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8507 comm=syz.0.816 [ 96.265267][ T8515] binder_alloc: 8514: binder_alloc_buf size -264 failed, no address space [ 96.268012][ T8515] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 96.369188][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 96.372005][ T8520] netlink: 'syz.2.820': attribute type 18 has an invalid length. [ 96.380839][ T8520] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.383812][ T8520] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.386228][ T8520] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.388735][ T8520] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.391743][ T8520] vxlan0: entered promiscuous mode [ 96.417352][ T8525] FAULT_INJECTION: forcing a failure. [ 96.417352][ T8525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.420816][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.3.822 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 96.423607][ T8525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.426261][ T8525] Call Trace: [ 96.427164][ T8525] [ 96.427916][ T8525] dump_stack_lvl+0x16c/0x1f0 [ 96.429078][ T8525] should_fail_ex+0x497/0x5b0 [ 96.430270][ T8525] _copy_from_user+0x2e/0xd0 [ 96.431553][ T8525] move_addr_to_kernel+0x68/0x160 [ 96.432871][ T8525] __sys_connect+0xb0/0x170 [ 96.434030][ T8525] ? __pfx___sys_connect+0x10/0x10 [ 96.435543][ T8525] ? __pfx_ksys_write+0x10/0x10 [ 96.436891][ T8525] __x64_sys_connect+0x72/0xb0 [ 96.438235][ T8525] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.439696][ T8525] do_syscall_64+0xcd/0x250 [ 96.440978][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.442667][ T8525] RIP: 0033:0x7f0f2fd85d29 [ 96.443945][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.449215][ T8525] RSP: 002b:00007f0f30ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 96.451506][ T8525] RAX: ffffffffffffffda RBX: 00007f0f2ff75fa0 RCX: 00007f0f2fd85d29 [ 96.453739][ T8525] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 0000000000000005 [ 96.455938][ T8525] RBP: 00007f0f30ada090 R08: 0000000000000000 R09: 0000000000000000 [ 96.458086][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.460324][ T8525] R13: 0000000000000000 R14: 00007f0f2ff75fa0 R15: 00007ffcaf04f928 [ 96.462567][ T8525] [ 96.473038][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 96.474440][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 96.782651][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 96.784437][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 97.092622][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 97.094335][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 97.189775][ T8535] fuse: Unknown parameter '' [ 97.244083][ T8539] FAULT_INJECTION: forcing a failure. [ 97.244083][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.247960][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.2.827 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 97.251292][ T8539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.254600][ T8539] Call Trace: [ 97.255599][ T8539] [ 97.256471][ T8539] dump_stack_lvl+0x16c/0x1f0 [ 97.257887][ T8539] should_fail_ex+0x497/0x5b0 [ 97.259267][ T8539] _copy_from_user+0x2e/0xd0 [ 97.260712][ T8539] nr_rt_ioctl+0x65a/0x29e0 [ 97.262113][ T8539] ? avc_has_perm_noaudit+0x143/0x3a0 [ 97.263674][ T8539] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 97.265120][ T8539] ? bpf_lsm_capable+0x9/0x10 [ 97.266576][ T8539] ? security_capable+0x7e/0x260 [ 97.268063][ T8539] nr_ioctl+0x19a/0x2e0 [ 97.269256][ T8539] sock_do_ioctl+0x116/0x280 [ 97.270666][ T8539] ? __pfx_sock_do_ioctl+0x10/0x10 [ 97.272166][ T8539] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 97.274152][ T8539] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 97.276058][ T8539] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 97.277984][ T8539] sock_ioctl+0x228/0x6c0 [ 97.279211][ T8539] ? __pfx_sock_ioctl+0x10/0x10 [ 97.280619][ T8539] ? selinux_file_ioctl+0x180/0x270 [ 97.282060][ T8539] ? selinux_file_ioctl+0xb4/0x270 [ 97.283518][ T8539] ? __pfx_sock_ioctl+0x10/0x10 [ 97.285190][ T8539] __x64_sys_ioctl+0x190/0x200 [ 97.286761][ T8539] do_syscall_64+0xcd/0x250 [ 97.288327][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.290308][ T8539] RIP: 0033:0x7fc867d85d29 [ 97.291855][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.298028][ T8539] RSP: 002b:00007fc868c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.300998][ T8539] RAX: ffffffffffffffda RBX: 00007fc867f75fa0 RCX: 00007fc867d85d29 [ 97.303386][ T8539] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004 [ 97.305997][ T8539] RBP: 00007fc868c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 97.308705][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.311279][ T8539] R13: 0000000000000000 R14: 00007fc867f75fa0 R15: 00007ffdbadef328 [ 97.313796][ T8539] [ 97.402871][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 97.404993][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 97.578438][ T8557] netlink: 'syz.2.832': attribute type 9 has an invalid length. [ 97.580619][ T8557] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.832'. [ 97.696504][ T8567] netlink: 68 bytes leftover after parsing attributes in process `syz.3.835'. [ 97.722710][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 97.724598][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 97.744311][ T8574] binder_alloc: 8573: binder_alloc_buf, no vma [ 97.877261][ T8585] netlink: 164 bytes leftover after parsing attributes in process `syz.3.841'. [ 97.908603][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 97.908618][ T39] audit: type=1400 audit(1736315575.728:641): avc: denied { accept } for pid=8588 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.954629][ T39] audit: type=1400 audit(1736315575.778:642): avc: denied { getopt } for pid=8592 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.995510][ T39] audit: type=1400 audit(1736315575.818:643): avc: denied { bind } for pid=8594 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.044679][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 98.046373][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 98.072012][ T8604] ALSA: seq fatal error: cannot create timer (-19) [ 98.075655][ T39] audit: type=1400 audit(1736315575.898:644): avc: denied { checkpoint_restore } for pid=8602 comm="syz.3.848" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.121326][ T39] audit: type=1400 audit(1736315575.938:645): avc: denied { getopt } for pid=8610 comm="syz.3.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.145615][ T39] audit: type=1400 audit(1736315575.968:646): avc: denied { write } for pid=8610 comm="syz.3.850" path="socket:[29144]" dev="sockfs" ino=29144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.147465][ T8612] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 98.153404][ T39] audit: type=1400 audit(1736315575.968:647): avc: denied { nlmsg_read } for pid=8610 comm="syz.3.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.162309][ T8612] hsr0: entered promiscuous mode [ 98.168894][ T8612] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 98.171880][ T8612] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 98.175390][ T8612] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 98.291639][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 98.305698][ T39] audit: type=1400 audit(1736315576.128:648): avc: denied { listen } for pid=8624 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.315969][ T39] audit: type=1400 audit(1736315576.138:649): avc: denied { read append open } for pid=8624 comm="syz.3.853" path="/207/file0/net_prio.prioidx" dev="9p" ino=36575204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.323500][ T39] audit: type=1400 audit(1736315576.138:650): avc: denied { map } for pid=8624 comm="syz.3.853" path="/207/file0/net_prio.prioidx" dev="9p" ino=36575204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.352756][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 98.355193][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 98.672605][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 98.674336][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 98.992653][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 98.995106][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 99.073657][ T8631] xt_socket: unknown flags 0xc [ 99.076229][ T8634] xt_socket: unknown flags 0xc [ 99.302641][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 99.304400][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 99.429191][ T8644] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 99.434163][ T8644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8644 comm=syz.3.859 [ 99.462273][ T8644] misc userio: The device must be registered before sending interrupts [ 99.613530][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 99.615797][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 99.665514][ T8649] syz.3.860: attempt to access beyond end of device [ 99.665514][ T8649] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 99.669205][ T8649] syz.3.860: attempt to access beyond end of device [ 99.669205][ T8649] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 99.673032][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 99.675733][ T8649] syz.3.860: attempt to access beyond end of device [ 99.675733][ T8649] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 99.679334][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 99.682277][ T8649] syz.3.860: attempt to access beyond end of device [ 99.682277][ T8649] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 99.686088][ T8649] syz.3.860: attempt to access beyond end of device [ 99.686088][ T8649] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 99.689745][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 99.692488][ T8649] syz.3.860: attempt to access beyond end of device [ 99.692488][ T8649] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 99.696302][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 99.699085][ T8649] syz.3.860: attempt to access beyond end of device [ 99.699085][ T8649] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 99.702850][ T8649] syz.3.860: attempt to access beyond end of device [ 99.702850][ T8649] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 99.706607][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 99.709337][ T8649] syz.3.860: attempt to access beyond end of device [ 99.709337][ T8649] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 99.713262][ T8649] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 99.715999][ T8649] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 99.732709][ T8648] nbd3: detected capacity change from 0 to 67108884 [ 99.739167][ T5924] block nbd3: Send control failed (result -89) [ 99.741465][ T5924] block nbd3: Request send failed, requeueing [ 99.744300][ T5934] block nbd3: Receive control failed (result -32) [ 99.744383][ T51] block nbd3: Dead connection, failed to find a fallback [ 99.749513][ T51] block nbd3: shutting down sockets [ 99.751271][ T51] blk_print_req_error: 79 callbacks suppressed [ 99.751283][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.756541][ T51] buffer_io_error: 39 callbacks suppressed [ 99.756551][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.761275][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.764850][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.767526][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.770110][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.772498][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.775151][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.777412][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.779993][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.782350][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.785003][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.787978][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.790543][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.792894][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.795459][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.797674][ T5924] ldm_validate_partition_table(): Disk read failed. [ 99.799646][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.802224][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.804548][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.807180][ T5924] Buffer I/O error on dev nbd3, logical block 0, async page read [ 99.809620][ T5924] Dev nbd3: unable to read RDB block 0 [ 99.811429][ T5924] nbd3: unable to read partition table [ 99.816174][ T5924] ldm_validate_partition_table(): Disk read failed. [ 99.818229][ T5924] Dev nbd3: unable to read RDB block 0 [ 99.819986][ T5924] nbd3: unable to read partition table [ 99.840564][ T8651] FAULT_INJECTION: forcing a failure. [ 99.840564][ T8651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.846072][ T8651] CPU: 3 UID: 0 PID: 8651 Comm: syz.3.861 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 99.849983][ T8651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.854293][ T8651] Call Trace: [ 99.855695][ T8651] [ 99.856885][ T8651] dump_stack_lvl+0x16c/0x1f0 [ 99.858826][ T8651] should_fail_ex+0x497/0x5b0 [ 99.860758][ T8651] _copy_from_user+0x2e/0xd0 [ 99.862638][ T8651] kstrtouint_from_user+0xd7/0x1c0 [ 99.864682][ T8651] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 99.866988][ T8651] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 99.869224][ T8651] proc_fail_nth_write+0x84/0x250 [ 99.870709][ T8651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.872417][ T8651] ? ksys_write+0x12b/0x250 [ 99.873765][ T8651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.875519][ T8651] vfs_write+0x24c/0x1150 [ 99.876771][ T8651] ? __fget_files+0x1fc/0x3a0 [ 99.878173][ T8651] ? __pfx___mutex_lock+0x10/0x10 [ 99.879642][ T8651] ? __pfx_vfs_write+0x10/0x10 [ 99.881091][ T8651] ? __fget_files+0x206/0x3a0 [ 99.882528][ T8651] ksys_write+0x12b/0x250 [ 99.883780][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 99.885175][ T8651] do_syscall_64+0xcd/0x250 [ 99.886556][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.888205][ T8651] RIP: 0033:0x7f0f2fd847df [ 99.889451][ T8651] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 99.894862][ T8651] RSP: 002b:00007f0f30ada030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 99.897195][ T8651] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f2fd847df [ 99.899409][ T8651] RDX: 0000000000000001 RSI: 00007f0f30ada0a0 RDI: 0000000000000003 [ 99.902203][ T8651] RBP: 00007f0f30ada090 R08: 0000000000000000 R09: 0000000000000000 [ 99.905238][ T8651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 99.907979][ T8651] R13: 0000000000000000 R14: 00007f0f2ff75fa0 R15: 00007ffcaf04f928 [ 99.910210][ T8651] [ 99.923795][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 99.925670][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 100.242687][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 100.244499][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 100.564239][ T3325] dvb-usb: bulk message failed: -22 (1/0) [ 100.566075][ T3325] dvb-usb: error -22 while querying for an remote control event. [ 100.882611][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 100.884457][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 101.200476][ T8672] __nla_validate_parse: 1 callbacks suppressed [ 101.200487][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 101.202630][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 101.206504][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 101.230959][ T8675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.870'. [ 101.234663][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 101.241619][ T8675] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 101.248804][ T8675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8675 comm=syz.3.870 [ 101.367595][ T8692] binder: 8690:8692 ioctl 5406 20000200 returned -22 [ 101.522805][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 101.524497][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 101.622893][ T832] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 101.795939][ T832] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 101.799401][ T832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.801780][ T832] usb 7-1: Product: syz [ 101.803380][ T832] usb 7-1: Manufacturer: syz [ 101.805105][ T832] usb 7-1: SerialNumber: syz [ 101.808575][ T832] usb 7-1: config 0 descriptor?? [ 101.832824][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 101.835203][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 102.013154][ T9] usb 7-1: USB disconnect, device number 14 [ 102.152758][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 102.154441][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 102.461783][ T8706] Bluetooth: MGMT ver 1.23 [ 102.472810][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 102.475132][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 102.501416][ T8708] netlink: 228 bytes leftover after parsing attributes in process `syz.3.883'. [ 102.782669][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 102.784937][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 102.903321][ T8713] block nbd3: shutting down sockets [ 103.092848][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 103.095095][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 103.402633][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 103.404933][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 103.615703][ T8730] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 103.712646][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 103.714887][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 104.022674][ T6811] dvb-usb: bulk message failed: -22 (1/0) [ 104.024949][ T6811] dvb-usb: error -22 while querying for an remote control event. [ 104.334576][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 104.336267][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 104.574759][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 104.574770][ T39] audit: type=1400 audit(1736315582.398:654): avc: denied { bind } for pid=8735 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.582077][ T39] audit: type=1400 audit(1736315582.398:655): avc: denied { node_bind } for pid=8735 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 104.616378][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 104.644415][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 104.646654][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 104.686661][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.690507][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.698889][ T8742] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 104.952808][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 104.954553][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 105.264845][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 105.267290][ T25] dvb-usb: error -22 while querying for an remote control event. [ 105.572669][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 105.574338][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 105.659708][ T8764] fuse: Bad value for 'fd' [ 105.882709][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 105.884963][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 106.013619][ T8780] netlink: 164 bytes leftover after parsing attributes in process `syz.0.909'. [ 106.054815][ T8786] fuse: Bad value for 'fd' [ 106.192782][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 106.194558][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 106.371377][ T39] audit: type=1400 audit(1736315584.188:656): avc: denied { sqpoll } for pid=8803 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.374473][ T8804] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.914'. [ 106.418219][ T8809] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.480150][ T8813] netlink: 100 bytes leftover after parsing attributes in process `syz.3.917'. [ 106.502823][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 106.504728][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 106.597430][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.919'. [ 106.600050][ T8817] netlink: 'syz.0.919': attribute type 7 has an invalid length. [ 106.602338][ T8817] netlink: 'syz.0.919': attribute type 8 has an invalid length. [ 106.604789][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 106.716274][ T8818] block nbd3: shutting down sockets [ 106.812709][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 106.814443][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 107.040594][ T39] audit: type=1400 audit(1736315584.858:657): avc: denied { write } for pid=8845 comm="syz.0.929" name="cgroup.kill" dev="9p" ino=36575198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.132881][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 107.135256][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 107.245850][ T8863] mkiss: ax0: crc mode is auto. [ 107.428130][ T8869] team0: Port device vlan0 removed [ 107.436081][ T77] tipc: Resetting bearer [ 107.446358][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 107.449003][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 107.526840][ T39] audit: type=1400 audit(1736315585.348:658): avc: denied { map } for pid=8868 comm="syz.0.936" path="/proc/723/net/vlan/vlan0" dev="proc" ino=4026533657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.529526][ T8869] netlink: 1164 bytes leftover after parsing attributes in process `syz.0.936'. [ 107.762870][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 107.765018][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 107.893517][ T39] audit: type=1400 audit(1736315585.718:659): avc: denied { ioctl } for pid=8886 comm="syz.2.941" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.975611][ T39] audit: type=1400 audit(1736315585.798:660): avc: denied { read } for pid=8888 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.072929][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.075277][ T25] dvb-usb: error -22 while querying for an remote control event. [ 108.252834][ T5972] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 108.383289][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.385568][ T25] dvb-usb: error -22 while querying for an remote control event. [ 108.388079][ T8893] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 108.391927][ T8893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8893 comm=syz.0.944 [ 108.407852][ T5972] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.411317][ T5972] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.416390][ T5972] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.419922][ T5972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 108.424601][ T5972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 108.430176][ T5972] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.433803][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.436086][ T8893] misc userio: The device must be registered before sending interrupts [ 108.436942][ T5972] usb 7-1: Product: syz [ 108.441270][ T5972] usb 7-1: Manufacturer: syz [ 108.450445][ T5972] cdc_wdm 7-1:1.0: skipping garbage [ 108.451998][ T5972] cdc_wdm 7-1:1.0: skipping garbage [ 108.456109][ T5972] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 108.457929][ T5972] cdc_wdm 7-1:1.0: Unknown control protocol [ 108.521388][ T39] audit: type=1400 audit(1736315586.338:661): avc: denied { ioctl } for pid=8896 comm="syz.0.946" path="socket:[32787]" dev="sockfs" ino=32787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.651410][ T5972] usb 7-1: USB disconnect, device number 15 [ 108.692775][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 108.694473][ T25] dvb-usb: error -22 while querying for an remote control event. [ 109.012615][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 109.014523][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 109.322655][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 109.324929][ T25] dvb-usb: error -22 while querying for an remote control event. [ 109.557065][ T8922] ufs: You didn't specify the type of your ufs filesystem [ 109.557065][ T8922] [ 109.557065][ T8922] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 109.557065][ T8922] [ 109.557065][ T8922] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 109.567094][ T8922] ufs: ufstype=old is supported read-only [ 109.569456][ T8922] syz.2.956: attempt to access beyond end of device [ 109.569456][ T8922] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 109.632659][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 109.632719][ T39] audit: type=1400 audit(1736315587.448:662): avc: denied { getopt } for pid=8921 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.634244][ T25] dvb-usb: error -22 while querying for an remote control event. [ 109.697463][ T39] audit: type=1400 audit(1736315587.518:663): avc: denied { bind } for pid=8935 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.827435][ T8954] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 109.834907][ T8954] pim6reg1: entered promiscuous mode [ 109.836705][ T8954] pim6reg1: entered allmulticast mode [ 109.953050][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 109.955483][ T25] dvb-usb: error -22 while querying for an remote control event. [ 109.990206][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 109.994430][ T8960] openvswitch: netlink: Key type 8224 is out of range max 32 [ 110.083217][ T8961] block nbd2: shutting down sockets [ 110.272772][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 110.275044][ T25] dvb-usb: error -22 while querying for an remote control event. [ 110.582700][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 110.584426][ T25] dvb-usb: error -22 while querying for an remote control event. [ 110.831485][ T8983] fuse: Bad value for 'fd' [ 110.892866][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 110.895099][ T25] dvb-usb: error -22 while querying for an remote control event. [ 111.101946][ T8994] netlink: 164 bytes leftover after parsing attributes in process `syz.2.983'. [ 111.174262][ T9000] binder: BINDER_SET_CONTEXT_MGR already set [ 111.176075][ T9000] binder: 8999:9000 ioctl 4018620d 20000100 returned -16 [ 111.178967][ T9000] binder: 8999:9000 ioctl c0306201 200001c0 returned -22 [ 111.182308][ T9000] binder: 8999:9000 ioctl c0306201 200003c0 returned -14 [ 111.202745][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 111.204450][ T25] dvb-usb: error -22 while querying for an remote control event. [ 111.334551][ T9010] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 111.343246][ T5934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.348851][ T5934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.352261][ T5934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.357004][ T5934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.360391][ T5934] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.365182][ T5934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.378672][ T9010] misc userio: The device must be registered before sending interrupts [ 111.415603][ T9015] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 111.417952][ T9016] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 111.426364][ T9015] bridge0: entered promiscuous mode [ 111.428311][ T9015] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.457016][ T9015] IPVS: persistence engine module ip_vs_pe_" not found [ 111.479288][ T9016] IPVS: persistence engine module ip_vs_pe_" not found [ 111.481090][ T9011] chnl_net:caif_netlink_parms(): no params data found [ 111.513088][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 111.515255][ T25] dvb-usb: error -22 while querying for an remote control event. [ 111.531456][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.533753][ T39] audit: type=1400 audit(1736315589.358:664): avc: denied { getopt } for pid=9014 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.539830][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.542924][ T9011] bridge_slave_0: entered allmulticast mode [ 111.545903][ T9011] bridge_slave_0: entered promiscuous mode [ 111.549495][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.552115][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.556536][ T9011] bridge_slave_1: entered allmulticast mode [ 111.559469][ T9011] bridge_slave_1: entered promiscuous mode [ 111.588090][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.593396][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.626478][ T9011] team0: Port device team_slave_0 added [ 111.632171][ T9011] team0: Port device team_slave_1 added [ 111.666326][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.668893][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.679148][ T9011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.684585][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.687269][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.696678][ T9011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.732041][ T9011] hsr_slave_0: entered promiscuous mode [ 111.734784][ T9011] hsr_slave_1: entered promiscuous mode [ 111.737192][ T9011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.739989][ T9011] Cannot create hsr debugfs directory [ 111.822818][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 111.824612][ T25] dvb-usb: error -22 while querying for an remote control event. [ 111.849681][ T9011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.854736][ T9011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.859381][ T9011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.865130][ T9011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.881921][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.884838][ T9011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.887907][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.890654][ T9011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.928547][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.941778][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.946449][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.964221][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.970369][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.972593][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.978573][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.981178][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.086373][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.142960][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 112.144991][ T25] dvb-usb: error -22 while querying for an remote control event. [ 112.188241][ T9011] veth0_vlan: entered promiscuous mode [ 112.192433][ T9011] veth1_vlan: entered promiscuous mode [ 112.204436][ T9011] veth0_macvtap: entered promiscuous mode [ 112.207707][ T9011] veth1_macvtap: entered promiscuous mode [ 112.214612][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.218454][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.222426][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.228781][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.232696][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.236679][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.240672][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.245113][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.250716][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.255359][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.258473][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.261678][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.266151][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.269076][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.272242][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.275725][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.278733][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.282495][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.288417][ T9011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.291480][ T9011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.294507][ T9011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.297413][ T9011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.341317][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.344466][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.362256][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.365043][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.383338][ T39] audit: type=1400 audit(1736315590.208:665): avc: denied { mounton } for pid=9011 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 112.417855][ T9048] netlink: 164 bytes leftover after parsing attributes in process `syz.2.996'. [ 112.434750][ T9052] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 112.453424][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 112.455824][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 112.538964][ T9058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.999'. [ 112.596435][ T9063] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 112.599807][ T9063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9063 comm=syz.0.1000 [ 112.630221][ T9063] misc userio: The device must be registered before sending interrupts [ 112.762825][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 112.764624][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 112.982317][ T9078] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1006'. [ 113.072850][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 113.074636][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 113.138268][ T9074] block nbd3: shutting down sockets [ 113.382639][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 113.384333][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 113.388512][ T39] audit: type=1400 audit(1736315591.208:666): avc: denied { write } for pid=9110 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.422909][ T5941] Bluetooth: hci4: command tx timeout [ 113.552928][ T9118] block nbd3: Device being setup by another task [ 113.556463][ T9116] block nbd3: shutting down sockets [ 113.566009][ T9125] Illegal XDP return value 1774318356 on prog (id 121) dev N/A, expect packet loss! [ 113.570389][ T9125] SELinux: syz.2.1022 (9125) set checkreqprot to 1. This is no longer supported. [ 113.570451][ T39] audit: type=1400 audit(1736315591.388:667): avc: denied { setcheckreqprot } for pid=9124 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 113.620407][ T39] audit: type=1400 audit(1736315591.438:668): avc: denied { create } for pid=9131 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.692703][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 113.694417][ T25] dvb-usb: error -22 while querying for an remote control event. [ 113.737949][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'. [ 113.740657][ T9140] netem: invalid attributes len -13 [ 113.742121][ T9140] netem: change failed [ 113.747072][ T9140] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 113.750902][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1026'. [ 113.799767][ T9146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=9146 comm=syz.2.1028 [ 113.936330][ T39] audit: type=1400 audit(1736315591.758:669): avc: denied { mounton } for pid=9152 comm="syz.2.1031" path="/254/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 114.002638][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 114.004413][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 114.011884][ T39] audit: type=1400 audit(1736315591.828:670): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.040563][ T39] audit: type=1400 audit(1736315591.858:671): avc: denied { accept } for pid=9158 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.169000][ T9163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1035'. [ 114.195239][ T9159] block nbd2: shutting down sockets [ 114.236348][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 114.239164][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1038'. [ 114.312998][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 114.315241][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 114.317710][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 114.320830][ T9180] netlink: 'syz.2.1040': attribute type 25 has an invalid length. [ 114.515194][ T9203] block nbd0: shutting down sockets [ 114.546695][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.551500][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.555470][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.559116][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.562896][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.566627][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.570403][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.575842][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.580418][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.0.1050 [ 114.622767][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 114.624520][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 114.709214][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 114.709232][ T39] audit: type=1400 audit(1736315592.528:675): avc: denied { module_load } for pid=9223 comm="syz.5.1058" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 114.709671][ T9225] kernel read not supported for file /policy (pid: 9225 comm: syz.5.1058) [ 114.782501][ T39] audit: type=1400 audit(1736315592.598:676): avc: denied { ioctl } for pid=9229 comm="syz.0.1060" path="socket:[35488]" dev="sockfs" ino=35488 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.942761][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 114.944518][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 115.262907][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 115.265159][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 115.282673][ T39] audit: type=1400 audit(1736315593.098:677): avc: denied { map } for pid=9268 comm="syz.2.1073" path="/proc/715/task/717" dev="proc" ino=36215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 115.456275][ T9284] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.502665][ T5941] Bluetooth: hci4: command tx timeout [ 115.526467][ T9296] openvswitch: netlink: IP tunnel dst address not specified [ 115.530921][ T9296] xt_recent: Unsupported userspace flags (00000042) [ 115.533744][ T39] audit: type=1400 audit(1736315593.358:678): avc: denied { ioctl } for pid=9295 comm="syz.0.1083" path="socket:[33674]" dev="sockfs" ino=33674 ioctlcmd=0x8925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.582832][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 115.584732][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 115.894688][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 115.896522][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 115.996425][ T9326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.999584][ T9326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.091831][ T9326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.095206][ T9326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.169719][ T9326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.172948][ T9326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.179890][ T9336] sctp: [Deprecated]: syz.5.1097 (pid 9336) Use of int in max_burst socket option. [ 116.179890][ T9336] Use struct sctp_assoc_value instead [ 116.188115][ T9336] netem: unknown loss type 13 [ 116.190202][ T9336] netem: change failed [ 116.212933][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 116.215212][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 116.249119][ T9326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.254394][ T9326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.265716][ T9340] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.336988][ T9326] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.339587][ T9326] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.347709][ T9326] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.350444][ T9326] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.359831][ T9326] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.362728][ T9326] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.368226][ T9326] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.370671][ T9326] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.387207][ T9348] (syz.5.1102,9348,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 116.390054][ T9348] (syz.5.1102,9348,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 116.480381][ T9356] x_tables: duplicate underflow at hook 1 [ 116.522644][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 116.524378][ T25] dvb-usb: error -22 while querying for an remote control event. [ 116.628396][ T9369] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.843010][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 116.845440][ T25] dvb-usb: error -22 while querying for an remote control event. [ 117.017665][ T9385] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.025218][ T9385] CIFS mount error: No usable UNC path provided in device string! [ 117.025218][ T9385] [ 117.028323][ T9385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 117.151807][ T9399] capability: warning: `syz.5.1115' uses 32-bit capabilities (legacy support in use) [ 117.155829][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 117.158036][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 117.322238][ T9414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 117.413031][ T9414] misc userio: The device must be registered before sending interrupts [ 117.463048][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 117.465284][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 117.592879][ T5941] Bluetooth: hci4: command tx timeout [ 117.667563][ T39] audit: type=1400 audit(1736315595.488:679): avc: denied { nlmsg_write } for pid=9433 comm="syz.5.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.691016][ T39] audit: type=1326 audit(1736315595.508:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1132" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2fd85d29 code=0x0 [ 117.769966][ T9451] __nla_validate_parse: 7 callbacks suppressed [ 117.769980][ T9451] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1135'. [ 117.782606][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 117.784672][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 117.789003][ T9453] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 117.824789][ T9457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.833523][ T39] audit: type=1400 audit(1736315595.658:681): avc: denied { getopt } for pid=9454 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.863611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfadc00: rx timeout, send abort [ 117.868458][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfad400: rx timeout, send abort [ 117.871839][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfadc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.877601][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.947532][ T39] audit: type=1400 audit(1736315595.768:682): avc: denied { write } for pid=9464 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.965592][ T39] audit: type=1400 audit(1736315595.788:683): avc: denied { getopt } for pid=9466 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.003198][ T9470] 9pnet_virtio: no channels available for device syz [ 118.033257][ T9475] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1145'. [ 118.091946][ T9480] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.095863][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 118.097664][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 118.130827][ T39] audit: type=1400 audit(1736315595.948:684): avc: denied { accept } for pid=9481 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.261532][ T9503] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1156'. [ 118.306246][ T9507] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 118.309408][ T9507] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1158'. [ 118.412842][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 118.414563][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 118.709473][ T9536] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.732886][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 118.735029][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 119.042684][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 119.044510][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 119.251021][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1172'. [ 119.253996][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1172'. [ 119.270698][ T9551] binder: 9550:9551 ioctl c0306201 20000980 returned -11 [ 119.362675][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 119.364384][ T25] dvb-usb: error -22 while querying for an remote control event. [ 119.663113][ T5941] Bluetooth: hci4: command tx timeout [ 119.682757][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 119.684503][ T25] dvb-usb: error -22 while querying for an remote control event. [ 119.763480][ T6811] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 119.825786][ T9593] kAFS: No cell specified [ 119.828342][ T9593] selinux_netlink_send: 25 callbacks suppressed [ 119.828356][ T9593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9593 comm=syz.0.1187 [ 119.836655][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1187'. [ 119.840329][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 119.840341][ T39] audit: type=1400 audit(1736315597.658:687): avc: denied { map } for pid=9592 comm="syz.0.1187" path="socket:[37917]" dev="sockfs" ino=37917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.854383][ T9593] misc userio: The device must be registered before sending interrupts [ 119.916231][ T6811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.920506][ T6811] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 119.924064][ T6811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.927711][ T6811] usb 10-1: config 0 descriptor?? [ 119.980236][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9608 comm=syz.2.1193 [ 120.002935][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 120.005277][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 120.135569][ T6811] usbhid 10-1:0.0: can't add hid device: -71 [ 120.137553][ T6811] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 120.145600][ T6811] usb 10-1: USB disconnect, device number 2 [ 120.262977][ T9622] dvmrp8: entered allmulticast mode [ 120.266654][ T9622] dvmrp8: left allmulticast mode [ 120.313329][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 120.314998][ T25] dvb-usb: error -22 while querying for an remote control event. [ 120.391029][ T9627] fuse: Unknown parameter 'grou00000000000000000000' [ 120.547751][ T9637] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 120.622850][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 120.624960][ T25] dvb-usb: error -22 while querying for an remote control event. [ 120.763919][ T9651] fuse: Unknown parameter 'grou00000000000000000000' [ 120.801217][ T9655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9655 comm=syz.2.1211 [ 120.816087][ T9657] mkiss: ax0: crc mode is auto. [ 120.910855][ T9660] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 120.942766][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 120.944627][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 121.008620][ T9676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.010832][ T9676] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.016313][ T9676] vhci_hcd vhci_hcd.0: Device attached [ 121.022270][ T9676] vhci_hcd vhci_hcd.0: port 0 already used [ 121.029095][ T9676] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 121.031102][ T9676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 121.033588][ T9676] vhci_hcd vhci_hcd.0: Device attached [ 121.035504][ T9682] vhci_hcd: connection closed [ 121.036360][ T9677] vhci_hcd: connection closed [ 121.042638][ T11] vhci_hcd: stop threads [ 121.047128][ T11] vhci_hcd: release socket [ 121.048544][ T11] vhci_hcd: disconnect device [ 121.051782][ T11] vhci_hcd: stop threads [ 121.053169][ T11] vhci_hcd: release socket [ 121.054561][ T11] vhci_hcd: disconnect device [ 121.104701][ T9688] fuse: Unknown parameter 'grou00000000000000000000' [ 121.252963][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 121.254967][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 121.562862][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 121.564594][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 121.842441][ T9714] fuse: Unknown parameter 'group_i00000000000000000000' [ 121.872865][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 121.875412][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 121.910153][ T9718] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 121.934044][ T9718] 9pnet: Could not find request transport: virtim [ 121.977870][ T9723] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 121.981925][ T9723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9723 comm=syz.0.1231 [ 122.028321][ T9723] misc userio: The device must be registered before sending interrupts [ 122.066899][ T9733] usb 1-1: USB disconnect, device number 2 [ 122.129001][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 122.182650][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 122.196552][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 122.229031][ T9748] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 122.242147][ T39] audit: type=1400 audit(1736315600.058:688): avc: denied { write } for pid=9749 comm="syz.0.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.275984][ T9754] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1242'. [ 122.292536][ T9762] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1244'. [ 122.461927][ T9787] tipc: Resetting bearer [ 122.477644][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9787 comm=syz.0.1251 [ 122.477698][ T9789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9789 comm=syz.0.1251 [ 122.504067][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 122.505754][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 122.649725][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.812747][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 122.815533][ T25] dvb-usb: error -22 while querying for an remote control event. [ 122.916248][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.918544][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.920794][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.923756][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.926781][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.929823][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.932220][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.935034][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.937395][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.940451][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.945095][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.948294][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.951436][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.956319][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.959501][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.963142][ T9831] overlay: filesystem on ./bus not supported as upperdir [ 122.967870][ T9831] overlay: ./bus is not a directory [ 122.968187][ T39] audit: type=1800 audit(1736315600.788:689): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1265" name="bus" dev="overlay" ino=2163 res=0 errno=0 [ 122.979978][ T9831] overlay: Unknown parameter 'À' [ 122.982382][ T9831] overlay: Unknown parameter 'À' [ 122.986204][ T9831] overlay: Unknown parameter 'À' [ 122.988675][ T9831] overlay: Unknown parameter 'À' [ 122.991016][ T9831] overlay: Unknown parameter 'À' [ 122.993822][ T9831] overlay: Unknown parameter 'À' [ 122.996248][ T9831] overlay: Unknown parameter 'À' [ 122.998192][ T9831] overlay: Unknown parameter 'À' [ 123.000155][ T9831] overlay: Unknown parameter 'À' [ 123.002322][ T9831] overlay: Unknown parameter 'À' [ 123.005279][ T9831] overlay: Unknown parameter 'À' [ 123.007685][ T9831] overlay: Unknown parameter 'À' [ 123.010147][ T9831] overlay: Unknown parameter 'À' [ 123.012440][ T9831] overlay: Unknown parameter 'À' [ 123.014974][ T9831] overlay: Unknown parameter 'À' [ 123.017267][ T9831] overlay: Unknown parameter 'À' [ 123.019567][ T9831] overlay: Unknown parameter 'À' [ 123.022028][ T9831] overlay: Unknown parameter 'À' [ 123.024577][ T9831] overlay: Unknown parameter 'À' [ 123.026968][ T9831] overlay: Unknown parameter 'À' [ 123.029180][ T9831] overlay: Unknown parameter 'À' [ 123.031404][ T9831] overlay: Unknown parameter 'À' [ 123.034176][ T9831] overlay: Unknown parameter 'À' [ 123.036472][ T9831] overlay: Unknown parameter 'À' [ 123.038805][ T9831] overlay: Unknown parameter 'À' [ 123.041077][ T9831] overlay: Unknown parameter 'À' [ 123.043682][ T9831] overlay: Unknown parameter 'À' [ 123.045996][ T9831] overlay: Unknown parameter 'À' [ 123.048287][ T9831] overlay: Unknown parameter 'À' [ 123.050543][ T9831] overlay: Unknown parameter 'À' [ 123.053378][ T9831] overlay: Unknown parameter 'À' [ 123.057725][ T9831] overlay: Unknown parameter 'À' [ 123.059449][ T9831] overlay: Unknown parameter 'À' [ 123.061118][ T9831] overlay: Unknown parameter 'À' [ 123.063193][ T9831] overlay: Unknown parameter 'À' [ 123.065139][ T9831] overlay: Unknown parameter 'À' [ 123.067004][ T9831] overlay: Unknown parameter 'À' [ 123.068836][ T9831] overlay: Unknown parameter 'À' [ 123.071047][ T9831] overlay: Unknown parameter 'À' [ 123.074059][ T9831] overlay: Unknown parameter 'À' [ 123.076444][ T9831] overlay: Unknown parameter 'À' [ 123.078349][ T9831] overlay: Unknown parameter 'À' [ 123.080550][ T9831] overlay: Unknown parameter 'À' [ 123.123049][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 123.125366][ T25] dvb-usb: error -22 while querying for an remote control event. [ 123.125626][ T9834] __nla_validate_parse: 2 callbacks suppressed [ 123.125640][ T9834] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1266'. [ 123.291621][ T9841] IPVS: Error connecting to the multicast addr [ 123.351951][ T9854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9854 comm=syz.2.1273 [ 123.432694][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 123.434485][ T25] dvb-usb: error -22 while querying for an remote control event. [ 123.448617][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 123.452105][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 123.468564][ T9867] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 123.521534][ T9869] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1277'. [ 123.561464][ T9855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.563688][ T9855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.571591][ T9855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.577665][ T9855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.579497][ T9855] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.585504][ T9855] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.599604][ T9877] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1280'. [ 123.627301][ T9877] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1280'. [ 123.635616][ T39] audit: type=1400 audit(1736315601.458:690): avc: denied { setopt } for pid=9876 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.641151][ T39] audit: type=1400 audit(1736315601.458:691): avc: denied { execute } for pid=9882 comm="syz.5.1282" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.661374][ T9887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9887 comm=syz.2.1284 [ 123.739134][ T9895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9895 comm=syz.0.1285 [ 123.744639][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 123.746857][ T25] dvb-usb: error -22 while querying for an remote control event. [ 123.821730][ T39] audit: type=1400 audit(2000000000.050:692): avc: denied { setopt } for pid=9911 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.830565][ T39] audit: type=1400 audit(2000000000.060:693): avc: denied { getopt } for pid=9911 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.844574][ T9909] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1289'. [ 123.870584][ T9915] netlink: 'syz.0.1291': attribute type 12 has an invalid length. [ 123.872960][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 124.052680][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 124.054360][ T25] dvb-usb: error -22 while querying for an remote control event. [ 124.373029][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 124.375111][ T25] dvb-usb: error -22 while querying for an remote control event. [ 124.682990][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 124.685088][ T25] dvb-usb: error -22 while querying for an remote control event. [ 124.698073][ T9932] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 124.702489][ T9932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9932 comm=syz.5.1296 [ 124.747958][ T9934] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 124.790951][ T9935] misc userio: The device must be registered before sending interrupts [ 124.828556][ T39] audit: type=1400 audit(2000000001.059:694): avc: denied { map } for pid=9941 comm="syz.2.1300" path="pipe:[40108]" dev="pipefs" ino=40108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.842925][ T39] audit: type=1400 audit(2000000001.059:695): avc: denied { execute } for pid=9941 comm="syz.2.1300" path="pipe:[40108]" dev="pipefs" ino=40108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.884058][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1304'. [ 124.937451][ T39] audit: type=1400 audit(2000000001.169:696): avc: denied { mount } for pid=9954 comm="syz.2.1306" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.939588][ T9955] overlayfs: failed to clone upperpath [ 124.951917][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 124.993012][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 124.995066][ T25] dvb-usb: error -22 while querying for an remote control event. [ 125.037494][ T9965] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 125.070001][ T9969] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 125.076144][ T9969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9969 comm=syz.5.1311 [ 125.170474][ T9969] misc userio: The device must be registered before sending interrupts [ 125.217223][ T9984] tipc: Started in network mode [ 125.218717][ T9984] tipc: Node identity 7f000001, cluster identity 4711 [ 125.221089][ T9984] tipc: Enabled bearer , priority 10 [ 125.312812][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 125.315065][ T25] dvb-usb: error -22 while querying for an remote control event. [ 125.503010][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.582939][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 125.622653][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 125.624523][ T25] dvb-usb: error -22 while querying for an remote control event. [ 125.813549][T10006] xt_hashlimit: size too large, truncated to 1048576 [ 125.878252][T10012] syzkaller1: entered promiscuous mode [ 125.880226][T10012] syzkaller1: entered allmulticast mode [ 125.902795][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.933007][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 125.935247][ T25] dvb-usb: error -22 while querying for an remote control event. [ 126.242698][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 126.245038][ T25] dvb-usb: error -22 while querying for an remote control event. [ 126.332663][ T6811] tipc: Node number set to 2130706433 [ 126.532123][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 126.564840][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 126.569284][ T25] dvb-usb: error -22 while querying for an remote control event. [ 126.798687][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 126.873906][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 126.875628][ T25] dvb-usb: error -22 while querying for an remote control event. [ 126.964581][T10037] tun0: tun_chr_ioctl cmd 1074025675 [ 126.966175][T10037] tun0: persist enabled [ 126.967866][T10037] program syz.0.1331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.970872][T10037] tun0: tun_chr_ioctl cmd 1074025675 [ 126.972297][T10037] tun0: persist disabled [ 127.144510][T10055] can: request_module (can-proto-0) failed. [ 127.182736][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 127.185077][ T25] dvb-usb: error -22 while querying for an remote control event. [ 127.361285][T10067] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.399289][T10073] fuse: Unknown parameter 'group_id00000000000000000000' [ 127.502736][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 127.507375][ T25] dvb-usb: error -22 while querying for an remote control event. [ 127.534539][T10089] program syz.0.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.583919][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.673023][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 127.743821][T10112] fuse: Unknown parameter 'group_id00000000000000000000' [ 127.822772][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 127.825052][ T25] dvb-usb: error -22 while querying for an remote control event. [ 128.101375][T10139] o2cb: This node has not been configured. [ 128.104665][T10139] o2cb: Cluster check failed. Fix errors before retrying. [ 128.106945][T10139] (syz.0.1359,10139,1):user_dlm_register:674 ERROR: status = -22 [ 128.109352][T10139] (syz.0.1359,10139,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 128.132759][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 128.134318][ T25] dvb-usb: error -22 while querying for an remote control event. [ 128.350479][T10147] __nla_validate_parse: 2 callbacks suppressed [ 128.350490][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 128.366281][T10144] cgroup: No subsys list or none specified [ 128.443631][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 128.444657][T10160] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1364'. [ 128.445328][ T25] dvb-usb: error -22 while querying for an remote control event. [ 128.517090][T10169] futex_wake_op: syz.3.1367 tries to shift op by -1; fix this program [ 128.565596][T10169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.648173][T10169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.740419][T10169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.752666][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 128.755104][ T25] dvb-usb: error -22 while querying for an remote control event. [ 128.804538][T10169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.890219][T10182] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 128.906069][T10169] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.918487][T10169] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.927888][T10169] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.935541][T10169] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.023561][T10192] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1375'. [ 129.058004][T10197] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 129.061612][T10196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 129.062695][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 129.069784][ T25] dvb-usb: error -22 while querying for an remote control event. [ 129.101591][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 129.116396][T10188] 9pnet_fd: Insufficient options for proto=fd [ 129.175329][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 129.222144][ T39] audit: type=1400 audit(2000000005.449:697): avc: denied { map } for pid=10204 comm="syz.2.1379" path="socket:[41337]" dev="sockfs" ino=41337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 129.255674][T10209] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1380'. [ 129.258302][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 129.372683][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 129.374529][ T25] dvb-usb: error -22 while querying for an remote control event. [ 129.664226][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.682705][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 129.684441][ T25] dvb-usb: error -22 while querying for an remote control event. [ 129.742759][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 129.992782][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 130.002782][ T25] dvb-usb: error -22 while querying for an remote control event. [ 130.158037][T10238] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1384'. [ 130.313659][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 130.315393][ T5972] dvb-usb: error -22 while querying for an remote control event. [ 130.370739][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 130.481489][ T39] audit: type=1400 audit(2000000006.709:698): avc: denied { shutdown } for pid=10269 comm="syz.0.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.569358][T10276] nft_compat: unsupported protocol 0 [ 130.575784][T10277] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1391'. [ 130.579382][T10276] [ 130.580298][T10276] ====================================================== [ 130.582947][T10276] WARNING: possible circular locking dependency detected [ 130.585661][T10276] 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 Not tainted [ 130.588842][T10276] ------------------------------------------------------ [ 130.592303][T10276] syz.0.1391/10276 is trying to acquire lock: [ 130.594667][T10276] ffffffff8fedcec8 (rtnl_mutex){+.+.}-{4:4}, at: ax25_setsockopt+0x97d/0xb00 [ 130.597966][T10276] [ 130.597966][T10276] but task is already holding lock: [ 130.600707][T10276] ffff88802e4ba258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x1af/0xb00 [ 130.604206][T10276] [ 130.604206][T10276] which lock already depends on the new lock. [ 130.604206][T10276] [ 130.608028][T10276] [ 130.608028][T10276] the existing dependency chain (in reverse order) is: [ 130.611394][T10276] [ 130.611394][T10276] -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 130.614276][T10276] lock_sock_nested+0x3a/0xf0 [ 130.616218][T10276] ax25_device_event+0x2b5/0x610 [ 130.618208][T10276] notifier_call_chain+0xb7/0x410 [ 130.620233][T10276] call_netdevice_notifiers_info+0xbe/0x140 [ 130.622578][T10276] __dev_notify_flags+0x1f9/0x2e0 [ 130.622780][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 130.624631][T10276] dev_change_flags+0x10c/0x160 [ 130.626889][ T25] dvb-usb: error -22 while querying for an remote control event. [ 130.628853][T10276] dev_ifsioc+0x9c8/0x10b0 [ 130.628875][T10276] dev_ioctl+0x224/0x10c0 [ 130.628893][T10276] sock_do_ioctl+0x19e/0x280 [ 130.637490][T10276] sock_ioctl+0x228/0x6c0 [ 130.639430][T10276] __x64_sys_ioctl+0x190/0x200 [ 130.641528][T10276] do_syscall_64+0xcd/0x250 [ 130.643484][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.645979][T10276] [ 130.645979][T10276] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 130.648659][T10276] __lock_acquire+0x249e/0x3c40 [ 130.650677][T10276] lock_acquire.part.0+0x11b/0x380 [ 130.652771][T10276] __mutex_lock+0x19b/0xa60 [ 130.654691][T10276] ax25_setsockopt+0x97d/0xb00 [ 130.656691][T10276] do_sock_setsockopt+0x222/0x480 [ 130.658771][T10276] __sys_setsockopt+0x1a0/0x230 [ 130.660729][T10276] __x64_sys_setsockopt+0xbd/0x160 [ 130.662839][T10276] do_syscall_64+0xcd/0x250 [ 130.664698][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.667033][T10276] [ 130.667033][T10276] other info that might help us debug this: [ 130.667033][T10276] [ 130.670833][T10276] Possible unsafe locking scenario: [ 130.670833][T10276] [ 130.673542][T10276] CPU0 CPU1 [ 130.675512][T10276] ---- ---- [ 130.677470][T10276] lock(sk_lock-AF_AX25); [ 130.679128][T10276] lock(rtnl_mutex); [ 130.681555][T10276] lock(sk_lock-AF_AX25); [ 130.684230][T10276] lock(rtnl_mutex); [ 130.685775][T10276] [ 130.685775][T10276] *** DEADLOCK *** [ 130.685775][T10276] [ 130.688625][T10276] 1 lock held by syz.0.1391/10276: [ 130.690570][T10276] #0: ffff88802e4ba258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x1af/0xb00 [ 130.694274][T10276] [ 130.694274][T10276] stack backtrace: [ 130.696516][T10276] CPU: 1 UID: 0 PID: 10276 Comm: syz.0.1391 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 130.700564][T10276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.704547][T10276] Call Trace: [ 130.705784][T10276] [ 130.706907][T10276] dump_stack_lvl+0x116/0x1f0 [ 130.708673][T10276] print_circular_bug+0x419/0x5d0 [ 130.710618][T10276] check_noncircular+0x31a/0x400 [ 130.712559][T10276] ? __pfx_check_noncircular+0x10/0x10 [ 130.714680][T10276] ? rcu_is_watching+0x12/0xc0 [ 130.716487][T10276] ? lockdep_lock+0xc6/0x200 [ 130.718187][T10276] ? __pfx_lockdep_lock+0x10/0x10 [ 130.720041][T10276] __lock_acquire+0x249e/0x3c40 [ 130.721923][T10276] ? __pfx___lock_acquire+0x10/0x10 [ 130.723865][T10276] ? __pfx_register_lock_class+0x10/0x10 [ 130.726032][T10276] lock_acquire.part.0+0x11b/0x380 [ 130.727983][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.729828][T10276] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 130.732004][T10276] ? rcu_is_watching+0x12/0xc0 [ 130.733758][T10276] ? trace_lock_acquire+0x14e/0x1f0 [ 130.735702][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.737515][T10276] ? lock_acquire+0x2f/0xb0 [ 130.739187][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.741023][T10276] __mutex_lock+0x19b/0xa60 [ 130.742861][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.744679][T10276] ? find_held_lock+0x2d/0x110 [ 130.746498][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.748302][T10276] ? __pfx___mutex_lock+0x10/0x10 [ 130.750302][T10276] ? trace_lock_acquire+0x14e/0x1f0 [ 130.752340][T10276] ? __might_fault+0xe3/0x190 [ 130.754101][T10276] ? ax25_setsockopt+0x97d/0xb00 [ 130.755948][T10276] ax25_setsockopt+0x97d/0xb00 [ 130.757777][T10276] ? __pfx_ax25_setsockopt+0x10/0x10 [ 130.759753][T10276] ? selinux_socket_setsockopt+0x6a/0x80 [ 130.761917][T10276] ? __pfx_ax25_setsockopt+0x10/0x10 [ 130.763866][T10276] do_sock_setsockopt+0x222/0x480 [ 130.765679][T10276] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.767683][T10276] ? lock_acquire+0x2f/0xb0 [ 130.769432][T10276] __sys_setsockopt+0x1a0/0x230 [ 130.771309][T10276] __x64_sys_setsockopt+0xbd/0x160 [ 130.773200][T10276] ? do_syscall_64+0x91/0x250 [ 130.774930][T10276] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.776891][T10276] do_syscall_64+0xcd/0x250 [ 130.778598][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.780763][T10276] RIP: 0033:0x7f8dbb785d29 [ 130.782377][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.788057][T10276] RSP: 002b:00007f8dbc592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.791136][T10276] RAX: ffffffffffffffda RBX: 00007f8dbb975fa0 RCX: 00007f8dbb785d29 [ 130.794193][T10276] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 000000000000000f [ 130.796997][T10276] RBP: 00007f8dbb801b08 R08: 0000000000000010 R09: 0000000000000000 [ 130.799808][T10276] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 130.802668][T10276] R13: 0000000000000000 R14: 00007f8dbb975fa0 R15: 00007ffd4dfdb878 [ 130.805515][T10276] [ 130.942681][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 130.944650][ T25] dvb-usb: error -22 while querying for an remote control event. [ 131.262689][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 131.264968][ T25] dvb-usb: error -22 while querying for an remote control event. [ 131.572719][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 131.575073][ T25] dvb-usb: error -22 while querying for an remote control event. [ 131.892681][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 131.895037][ T25] dvb-usb: error -22 while querying for an remote control event. [ 132.202999][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 132.205306][ T25] dvb-usb: error -22 while querying for an remote control event. [ 132.512662][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 132.514755][ T25] dvb-usb: error -22 while querying for an remote control event. [ 132.705019][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.707153][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.822824][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 132.824481][ T9] dvb-usb: error -22 while querying for an remote control event. [ 133.132653][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 133.134754][ T9] dvb-usb: error -22 while querying for an remote control event. [ 133.442871][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 133.444852][ T9] dvb-usb: error -22 while querying for an remote control event. [ 133.752922][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 133.755105][ T9] dvb-usb: error -22 while querying for an remote control event. [ 134.063691][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 134.065801][ T9] dvb-usb: error -22 while querying for an remote control event. [ 134.382842][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 134.384597][ T9] dvb-usb: error -22 while querying for an remote control event. [ 134.692915][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 134.695079][ T9] dvb-usb: error -22 while querying for an remote control event. [ 135.002763][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 135.004487][ T35] dvb-usb: error -22 while querying for an remote control event. [ 135.312648][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 135.314372][ T35] dvb-usb: error -22 while querying for an remote control event. [ 135.622664][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 135.624689][ T35] dvb-usb: error -22 while querying for an remote control event. [ 135.932767][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 135.935042][ T35] dvb-usb: error -22 while querying for an remote control event. [ 136.242630][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 136.244315][ T35] dvb-usb: error -22 while querying for an remote control event. [ 136.552829][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 136.554954][ T35] dvb-usb: error -22 while querying for an remote control event. [ 136.863889][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 136.865571][ T5994] dvb-usb: error -22 while querying for an remote control event. [ 137.182753][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 137.184917][ T5994] dvb-usb: error -22 while querying for an remote control event. [ 137.492663][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 137.494719][ T9] dvb-usb: error -22 while querying for an remote control event. [ 137.802751][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 137.804412][ T9] dvb-usb: error -22 while querying for an remote control event. [ 138.112999][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 138.115202][ T9] dvb-usb: error -22 while querying for an remote control event. [ 138.423959][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 138.425668][ T35] dvb-usb: error -22 while querying for an remote control event. [ 138.732679][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 138.734627][ T35] dvb-usb: error -22 while querying for an remote control event. [ 139.052709][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 139.054978][ T35] dvb-usb: error -22 while querying for an remote control event. [ 139.362623][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 139.364307][ T35] dvb-usb: error -22 while querying for an remote control event. [ 139.673729][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 139.675717][ T35] dvb-usb: error -22 while querying for an remote control event. [ 139.982696][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 139.984851][ T35] dvb-usb: error -22 while querying for an remote control event. [ 140.293111][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 140.295283][ T35] dvb-usb: error -22 while querying for an remote control event. VM DIAGNOSIS: 05:53:24 Registers: info registers vcpu 0 CPU#0 RAX=00000000000ceb44 RBX=0000000000000000 RCX=ffffffff8b29e7d9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1ec20 RDI=ffffffff81709509 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f3d90 R15=0000000000000000 RIP=ffffffff8b29fbbf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020010000 CR3=00000000637cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030717062 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbb802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000040030008 0100000040020008 000000002330302f 2330302f6273752f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b02796f6212a08ef b84bd2d4309f3a37 269dce984bff462a 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0b2f41316de8416 6bd8aa7395246021 707a562614e1235a 8fcfb61e8b0c579c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d976d7d290a7aa3b 7ff86df61eb75159 b22011ec30041cad 1b79487372c1b3a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2f41316de84166b d8aa739524602170 7a562614e1235a8f cfb61e8b0c579cb0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2796f6212a08efb8 4bd2d4309f3a3726 9dce984bff462ab6 2191083ab5204c01 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004003000801 0000004002000800 0000002330302f23 30302f6273752f73 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc000000000d RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff851beab0 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc9000384f2d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=ffffffff9ab0fae0 R14=ffffffff9ab0fb30 R15=000000000000004e RIP=ffffffff851bead7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8dbc5926c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8dbc570f98 CR3=00000000637cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dbc591f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 6962762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000012 4a41550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ccb9c RBX=0000000000000002 RCX=ffffffff8b29e7d9 RDX=ffffed100d506fee RSI=ffffffff8bd1ec20 RDI=ffffffff81709509 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f3d90 R15=0000000000000000 RIP=ffffffff8b29fbbf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8dbb76bac0 CR3=0000000032ca4000 CR4=00352ef0 DR0=00000000fffffffd DR1=7fffffffffffffff DR2=0000000001000000 DR3=00000000000000be DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f2fe02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9760557ccb358e69 fb1cef790c000000 0078900073010000 000000009e894b3c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231800000008 000002b7fffffff0 0000040700000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010700000000 0000a1bf00000000 fff08a7b00000000 000008b700000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=00000000 EBX=00000000 ECX=00000000 EDX=00000600 ESI=00000000 EDI=00000000 EBP=00000000 ESP=00003104 EIP=00001914 EFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =9760 00097600 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=00000030 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000000 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc867e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc867e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc867e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc867e02ab5