last executing test programs: 2m46.839660715s ago: executing program 0 (id=1): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @local, 'ip6gretap0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 2m46.747816762s ago: executing program 0 (id=9): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046103, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x3, 0x0, [{0x9, 0x5, 0x1, 0x0, @sint={0x6, 0x5}}, {0x0, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x7f, 0x6, 0x10, 0x350}}, {0x4, 0x4, 0x1, 0x0, @irqchip={0x3, 0x5d4}}]}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000000c0)=0x1) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) (async) read(r0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRESDEC=r5, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c000280060005004e20040065e920de4ac9d67e51744c940c89015106fee9020ee75bad088070483da1c5081b734ff2b53939ae32ef762ead5a775e635fc65a812367b23cdc07a1ad455d15903313bbef07dff902dabe8c7538b7d3f14103a89b19e0741f2cbdbf854dc573d7ecf9f1dcdafe04c22ec34bad79413c04df5c770f1119fdbee9410bb5ea1f60c841e6e8d3ae8e9d35fe3a46d62038055f1bf573bccc7dd3e9c9d29ec5fc4bdb4ab288e56a3fda8b73803b"], 0x3c}}, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="bf8e4fdc90b49ed0c77f63dccb1804c7f0fc5faa6a62795d0bc04d5242f4262ca1479ccfc11ff006daa314b559d9055148bc3d8d5b9dc0e7a23ba2da350035cca34ec798757e5e2f8d5a4c682d34c899b9f64bf210da647bbe5bd1ea08af24b2ea34ceac9c5dc8fb1b79533b9e330fb5fa43e05a9c4d1cb51de643c457d536c508459d36ba29", 0x86, r0}, 0x68) 2m46.615335231s ago: executing program 0 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071fd0b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x22e65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0xc0844123, &(0x7f0000000080)=0x5) syz_open_dev$sndctrl(&(0x7f0000000200), 0x7fff, 0x400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="09000000000000000700000000000000000000000806da8c6171d19dad92bae56b336256cdd741104d8031e9ec4c755ceb0d54266a4d857c9f02f3dc80687ae858f282b7ffac5a2fa7c4f0e3170fd1cf2f0e2c479fd306ee74d812e628caeb60c413ff9d7c006d9513d6691b2738bed2ae6a6dc4cc0be99df8f9e84608133091686545cabc6836e68618145a6bd46f2a43af4a0cd6cfc608d3a7e410df6240051a97af7f", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05000000040000000100"/28], 0x50) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x24081, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000000240)) 2m43.594620722s ago: executing program 0 (id=23): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x1a, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m28.446852279s ago: executing program 32 (id=23): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x1a, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m55.35362646s ago: executing program 3 (id=674): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 64) sendfile(r1, r1, 0x0, 0x9) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) (async, rerun: 64) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x1) (async, rerun: 64) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x9, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 1m55.350989113s ago: executing program 3 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) fstat(r0, &(0x7f0000000300)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x1]}, 0x8) 1m54.327251585s ago: executing program 3 (id=684): umount2(&(0x7f0000000080)='./file0\x00', 0xb) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x13, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x200, 0x12002}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x880) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @multicast1}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xce, 0x0, 0x4, [0x200, 0x93, 0x9, 0x80000000, 0x5, 0x401]}, @ssrr={0x89, 0x27, 0xd9, [@empty, @dev={0xac, 0x14, 0x14, 0x22}, @local, @local, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @broadcast, @local, @empty]}, @timestamp={0x44, 0x24, 0x85, 0x0, 0x4, [0x5, 0x1327546f, 0x5, 0x10, 0x0, 0xd72000, 0x7, 0x7fff]}, @cipso={0x86, 0x4e, 0x3, [{0x6, 0x8, "1fb3b39b08bf"}, {0x6, 0xf, "36199e2538c834447eb1a8d7ed"}, {0x0, 0x12, "a8a7f5c53e0c476872be4d0b19cf6147"}, {0x2, 0xb, "08568acfa0406918bb"}, {0x7, 0x7, "7f3ddc783b"}, {0x7, 0xd, "990ea9375ee9e7a94ca66c"}]}, @cipso={0x86, 0x12, 0x3, [{0x2, 0xc, "34571ea4cbc73511193d"}]}, @ssrr={0x89, 0xf, 0x66, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x120, 0x4c00}, 0x20008000) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0xfffffe01, 0x8, 0x7, 0x7}, 0x6, 0xce7d, 0x0, 0x6, 0x0, 0xd4}}) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00303aacbf880000000000000000ff02423b9e6b00000000090000000001020190780000000060000006da343affff010000000000000000000000000001000000000000000047fe93bad50000006e74705c23f450c49e315b02c3b6ae712064dd1bd2e6a62af08f318b5b77e616a5663daf69a58397281c6044f32aaf", @ANYRES32=r5, @ANYRES64=r0, @ANYRESOCT], 0x0) 1m53.718001014s ago: executing program 3 (id=692): r0 = socket(0x11, 0xa, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48202, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) (async) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xfffffffffffffffe) (async) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xfffffffffffffffe) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x288440) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 1m53.471653065s ago: executing program 3 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x1]}, 0x8) 1m52.502600816s ago: executing program 3 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r7, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000248006f6e6430000000000d00010073797a30000000000900030073797a3f00000000"], 0x43}}, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd2c, 0x100000, {0x0, 0x0, 0x74, r1, {0x2, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0x4) 1m46.051643992s ago: executing program 2 (id=797): r0 = getgid() unshare(0x22020600) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000250001002ebd7000ffdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000110) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001200)={0x0, 0x1fd}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001280)={r3, 0x6, 0x6, [0x0, 0x8, 0x0, 0xdb, 0x9, 0x1]}, &(0x7f0000001140)=0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001340)='memory.numa_stat\x00', 0x5000000, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006572739fd76e00001800028005001600020000000500171d0000000004001200"], 0x48}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async) fchown(0xffffffffffffffff, 0x0, r0) (async) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x1, 0xa000) (async) r8 = userfaultfd(0x100801) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="000872ce4e400d6dc22fdc5b69bec0d50000", @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40094) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x332}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f0000001380)) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000001100)={0x80000000, &(0x7f00000000c0), &(0x7f0000001180)}) 1m46.051223654s ago: executing program 2 (id=798): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10000, 0x8) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x1) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10000, 0x8) (async) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x1) (async) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) (async) 1m45.977786671s ago: executing program 2 (id=799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') dup3(r0, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 1m45.977371994s ago: executing program 2 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) fgetxattr(r5, &(0x7f0000000040)=@random={'trusted.', 'q\x00'}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1m45.892522971s ago: executing program 2 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x5, 0x7, {{0xd, 0x4, 0x0, 0x5, 0x34, 0xbe0, 0x0, 0xfa, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@rr={0x7, 0x1b, 0x33, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x10, 0x8000, 0x5, 0x6, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xf7, [@empty, @empty, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x23, 0x34, [@local, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x8, [{@remote, 0x8}, {@remote, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010100, 0xa568}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe6, [@loopback, @remote, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, @empty]}, @timestamp={0x44, 0x18, 0x16, 0x0, 0x1, [0xff, 0x38ec7859, 0xffffffff, 0x800, 0x5]}, @lsrr={0x83, 0xb, 0xb5, [@loopback, @rand_addr=0x64010102]}]}}}}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000240)=0x3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', r1, 0x1, 0x578c50e960ac746f, 0x3a8, 0xb, {{0x30, 0x4, 0x1, 0x2, 0xc0, 0x68, 0x0, 0xc5, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@lsrr={0x83, 0x17, 0xdf, [@remote, @local, @remote, @rand_addr=0x64010100, @private=0xa010101]}, @end, @generic={0x89, 0xd, "742a9de47322f0f2f9c0a8"}, @cipso={0x86, 0x9, 0x0, [{0x7, 0x3, '%'}]}, @rr={0x7, 0x27, 0xa0, [@loopback, @multicast1, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x2a, 0x2, [{0x0, 0x7, "fb57b94b36"}, {0x6, 0x5, "08ed02"}, {0x2, 0x8, "316fec0105da"}, {0x0, 0x5, "83cffd"}, {0x6, 0x8, "964a029e3359"}, {0x2, 0x3, "8f"}]}, @ssrr={0x89, 0x27, 0x5d, [@multicast1, @broadcast, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendfile(r0, r2, &(0x7f00000003c0)=0x5, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000440)={0x5, 0x3}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000480)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x2, 0x0, r4, 0x100, 0x6, 0x8}) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000500), 0x101000) read$qrtrtun(r5, &(0x7f0000000540)=""/241, 0xf1) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f0000000680)=0x4) close_range(r6, r3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000006c0)={0x3}) (async) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) (async) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000780)={0x7, 'wg1\x00', {0x1}, 0x8}) r8 = openat$cgroup_ro(r3, &(0x7f00000007c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000800), 0x801, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) getsockname$packet(r9, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={@multicast1, 0x0, 0x0, 0x20, 0x0, [{@local}, {@multicast2}]}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'tunl0\x00', r1, 0x7, 0x20, 0x0, 0x5, {{0x15, 0x4, 0x1, 0x3b, 0x54, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0x7, 0xf, [@remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x30, 0x1, 0x2, [{@multicast2, 0x7}, {@loopback, 0x6dc7}, {@loopback, 0x6}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf94a}, {@local, 0x1}]}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@newtclass={0x2c, 0x28, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0x4}, {0x10, 0xfff3}, {0x9, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x94, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) (async) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000b40)) 1m45.571424539s ago: executing program 2 (id=803): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, &(0x7f0000001ac0)=""/4080, 0xff0) (async) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {0x14}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0xa5}, {}, {}, @connect={{0x2, 0xff}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa, {0x3, 0x8}, {0x0, 0x2}, @connect={{0x6, 0x71}, {0x7, 0x80}}}, {0x0, 0x1, 0x0, 0x0, @time, {0x0, 0x21}, {}, @quote={{0x0, 0x2}, 0x3ff}}], 0x70) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0xd000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3}}, './file0/file0\x00'}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x18, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m45.536918041s ago: executing program 33 (id=803): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, &(0x7f0000001ac0)=""/4080, 0xff0) (async) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {0x14}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0xa5}, {}, {}, @connect={{0x2, 0xff}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa, {0x3, 0x8}, {0x0, 0x2}, @connect={{0x6, 0x71}, {0x7, 0x80}}}, {0x0, 0x1, 0x0, 0x0, @time, {0x0, 0x21}, {}, @quote={{0x0, 0x2}, 0x3ff}}], 0x70) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0xd000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3}}, './file0/file0\x00'}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x18, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m36.466761205s ago: executing program 34 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r7, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000248006f6e6430000000000d00010073797a30000000000900030073797a3f00000000"], 0x43}}, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd2c, 0x100000, {0x0, 0x0, 0x74, r1, {0x2, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0x4) 1m12.997196627s ago: executing program 4 (id=1319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) 1m12.869112996s ago: executing program 4 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x1]}, 0x8) 1m11.905914053s ago: executing program 4 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) writev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)='3', 0x1}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000050601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff1160003"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d400000000000000000000000001"], 0x4b0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) 1m11.831636563s ago: executing program 4 (id=1346): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') r5 = eventfd(0x5f1) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) keyctl$dh_compute(0x15, &(0x7f00000000c0), 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000180)="b106c85602b0c9e39719a1c486eca007fd8abb847e452292b0e9fc8c044b498a2fa88ce2a9ed1a44410b92b6c62e124994bb8997e1f5e86d82060f9363e424c463f748", &(0x7f0000000600)=""/191, &(0x7f00000006c0)="6d663f1908ae6630a2f71d34bc74137b443b284bc1f1ac139147952873fb2c2b8fe08fe552f4cbe4ce97b403f8b4e550d0f7e25b79a0b3461604448c6a6565fedc0d137427536518b25d0d2dbcd8670340c3d9a4fb828565f167bfb72a5d1ae7158e0fc85a9c1c048f", &(0x7f0000000740)="d90827d92c731017e62c0dd7120b01c414bd7b5085a89d440bd3668cbe1644a4316332c95495ac13652ce9fccac6abce3955bb7cfe19a3b6d32c3f23ee964e1ef5c7dae336463589b185b742404b418205f230e28a737dcbb0026e5972a2a1292f159ecba4b528e807c8077721582d5f53b28f8645e5fd273bf5c0283c53f2209f939f8c617c1e805e0a2d9d5dd0db488bb668a64a94d2eb4ccdf83806e8a493c38b2e655ef1579af3367291c687aebd85686c93b1c0e3e91846861b0b9026d57f5703a769010c636d4f236e8effd9d79b08078112e94c74453e3d75f2f73a2045adae90c6e7761c91e395c04654", 0x5, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564233a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x248, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2054}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbf8}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe1, 0x3, "8d26eccf19dd183511bc8d19565aed761f4219bad13bfe27b557b94eca103a91e4e9dcaf5d5be1db3ff4bc42a769cb2aaea50c649635dca9f4771e16237ec1b53ae598b967c8d2616a010fc0ac9861b5a4e286a6f3d50b01347d9b620b7d16c19cd9d32d65d5e80d9b862480dc677023ce72dbd46d6df394fb009a36aa779d0cab663ef6a5844720718bc997db1a53c81551b0a9c17f38c78ec357e9e9d473a2f05b7816cc80e9f584f05bda2ec32a95e4b69f50abf87f367ca8c1cc85956ef7fede4057e4077b3e712cd488fd2ea2a9314122980f539cc2195592e9c5"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "492ec7bae46d2173d36012a6326adc676a48e8f912e50c00fb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "e9508cd6871d075a56a64b7e7141612b2f6e86b69f6f8d3e3566e51a8e77a0af0debfbd0e3735e7415e24d4c1d136272a7f1c2b202c6794547f673b18d70020aee4ac1f6625389cdd5b2ea9becbfab59eb3f525df3468bbd0955522c325ac88106d7e77955b85623"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x841}, 0x4000010) 1m11.682062845s ago: executing program 4 (id=1347): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) 1m11.338339198s ago: executing program 4 (id=1348): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 1m11.288629576s ago: executing program 35 (id=1348): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 2.095688154s ago: executing program 7 (id=2012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x1ff, @private2, 0x7}]}, &(0x7f0000000140)=0x10) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x5, 0x6}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="7ac93dd097ae0102ce50f8ede111f0b4e784bfcd875405a0330696cc193efd1be3863f65b938473db726ca1bb240fa38da91bf6349a71935b46193c3f3e11c6b6adca1fee18c85f450609f1dd30606cdc59bb1ef2bfcee51a100d6cbc8e37c53d5f53c9737275408d69696215a3ab228dd1409b0c1fde104d8560efda8c2cb0b2882a3e4882de25a6d77a84940bfb712ea11d745d5e61b0609a67da7169feaf05aa2585ac65b45d5771e", @ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1.806431032s ago: executing program 1 (id=2026): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7fa7}, @initial, @broadcast, @initial, {0x7, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x43a, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x21, "023211d171bf5d1bf0c5b75d1f28e01a4e147a89d5b2bcb3a926e0dbeae1d379b8"}, {@device_a, @device_b, 0x1000, "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"}, {@broadcast}, {@broadcast, @device_b, 0xc1, "6f37dda771b458dddbb39ef634b4ef91dfa99549e4986bd4311cac9d2f50d53a24543a536c51b5788b889c37dde8e6796384646f390824206e320c03f0befddb7ca2f38cc409cfb8a59ad422350d2924b93615e5e164ae304362c1e092eb178ed788e0ccabaf786b5d6b760d3ac18add2a64d5913d0e6ad2e6b892ae952944340394f8228822d1c6cbba4b5491a7df438ceb6c134a35f8e1c9a6c70e4a295458d9fe2ab138ad988d488cdd9d048734b417141f3048987488739e25469b2ef31581"}, {@device_b, @device_a, 0x3c, "7c130cd4a67a65358c682a358ca739c110a77687f968acde5fd8c2aecdecfb0012d3549435061beac59b3eed71aa6484d5014c06444da401a7208725"}, {@broadcast, @device_a, 0x45, "518a7eec681f97031798102ba46a94d942c3fa5e77ed8f4a151b8c627071dc2008b25fff2d8c1e312a2ee4a5f5d2d7a6e15754bee5e951d349563133dd774481f235a9f915"}, {@device_b, @device_b, 0xfb, "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"}, {@broadcast, @device_b, 0x5e, "2f390a1ed5a76d2ff011a943dea250c26a2c6d776f77460c0d7af03c13da5a71a89a9f23c7200713a1a49048cddc83fd5e20926bd5118494ec71b02b1e1f89b6467f0841671f6e8291f397e6917acea588d3c2e12eee1021dfb4572352c3"}, {@device_b, @broadcast, 0x5d, "ee01e46f48317d0717dd4acfc84ff3451110e575b34685d012e25c065bc701281d4e588325bec527ee4e4d68164fa7f5aef64e868012c36bfb017657b555c6d6e6713653ab1fc4ec98c491a82a3df430587833d178fab6262219dbde85"}]}, 0x13c0) (async) syz_80211_inject_frame(&(0x7f0000001440)=@device_b, &(0x7f0000001480)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @initial, @device_b, @device_b, {0x3, 0xe}}, @a_msdu=[{@device_b, @device_b, 0x1000, "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"}, {@device_b, @device_a, 0xca, "fab0d3cd4455e966e7336870fc8109f544c3909c79657978d9167c7712a0cd5cb03c50a5f6a33e12ce9da18fd25c7655d4b681434471585e4355fbc1c95e47a62d116609c57f16e3852a0a5c9654a614c46a2c1a53bba37f39a99783ec793ce8dcc0f05a0b255334770138b3e78732e1a7ee64b9c0fa3d31177bc94a93d4a15b6d08930314aed7256a73bd403340267b09df2b69e6e3cb673e533b02c21d8be173ad1fa60516b767127dc179a4c499dc949c1c4ea3dc2bfc9eb8f46dc48b4494cc8a4223a9644737e850"}, {@device_b, @device_b, 0x7e, "ec3171c3fedb0e844de18da28bc9326ec4d51d9d6c911f80196c646a0477afc5dec570e0a61d3a060a692d4dafe7543cc908722f1b037dddfcf3b667a3c22edcf06def469e737dfc2fbbe8c7ff5efef6b63eab2f63ef67e328e016ec6c50360d2e864914aec2b114613397c97faa927105a04a825e0afc78e424214e83e8"}, {@broadcast, @device_b, 0x89, "4ede15db1c1b02dd58e871d5a170f6142665b0b0ac6c87de6128c6fe79f41794b1fc3fdd9795e8d82cdf53498677ded5c8eeef031687d4e792cab7886bf008a51a1c68e38c5f71dfd5cb6e959ea413a2e719b8811eee3f7045af4fb00b1962a5a6d9da7192b45f6f8af1fc0ac1374a0861135db3283e7cf51d4001c26d784c9706a52323aff27c550d"}, {@device_b, @device_a, 0x54, "d32f969ce1b091becd71c9b6f2f96545cf459afaad6e753c2ff83c4fd524e5776a453675bb11348212102ff064b2f75a5cca11978578327a1a3e84b6bd18942733fe454ebbca5830423de592f1ce900d67da95ab"}, {@device_b, @broadcast, 0xc0, "308f36f36ef8e141aafd95af3db4b361d6a19e8c3f3ecda87b2e17100cf6cd9ca62d2a2c0b8d55bee95a5c1b236ac583023645c9e4f2de97b4b9a5c2df162925469d5bd93b66cbd6a453e457f3e21caa648679bbb2afbfdb4b94560b32605c75ca29e3539416d0111d1a0b24e1e7f970e49cea3161c33bb2687dcf026d74259e27e807c99cc9ecf4f5239501e5ffc5c62b60a83ed9843da2de396d1ad457f05a56f8bf67d4d664c8e5542b09b9d1fad45cf0124dde6bb0d0dc0fc206c7935c26"}, {@broadcast, @device_b, 0xb4, "17f12643f3b9a1b3842da44275fec97ae87f54ffe252c35fee5f7fb1c9235e283d3bee295454ba2fdc79b1028e0af56d978059a4c2442ac94fa511cfe0705b243d55e28478013d277b4880249a94aea234d6a6b28aa4b3e943be1c8f235085e17c07d61bab491a8de9f3c1520ed0ed5ae87dc2ae2ff9d099209a816bc936a3c7dba81d43e41c942ac23f093b3309ab104894521fb901a60907444f412e05234e23b55f26cef26008ab44809718adcce489047a9b"}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x85, "5b07033331c78fe380b21ae1ac7c8911cec716bd0388a620d4df7d95ad9f5740fc875ffb1b78a7285c1eeadec442e8c377f03fc66c6d007093ed46306cb431bb81e27c0fc472c4297b87e6819c9750755468c03153cbeacd941345388c13cc67fbd43b20c95c60f6af77882cdc75ce09252196b687862ffa77dddecff60610393580c26bb0"}]}, 0x14c0) (async) syz_80211_inject_frame(&(0x7f0000002980)=@broadcast, &(0x7f00000029c0)=@ctrl_frame=@ba={{}, {0xff}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0x3, 0x1}, "b230c24d0704314509cbe981821b7c08fdebc329ca63d766feba0534d44283b2eeec17c33e836f99722678a3f18a3e50b5683e5bbc691af0dfbb45621ccc318e3ddeff57d647eaadc145b9593948eed5f8871c8ac58105339305694ee59be8ea6c51c396db3f284ad8624c3493ec62576dfd13b7fb27f9341913f2ac473b47af"}}, 0x94) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000002a80), 0x2200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002ac0)={'dummy0\x00'}) (async) write$tun(r0, &(0x7f0000002b00)={@val={0x0, 0x305c}, @val={0x2, 0x4, 0x18d3, 0x401, 0x8e0, 0x3b}, @ipv4=@tipc={{0x3c, 0x4, 0x1, 0x7, 0x108, 0x68, 0x0, 0x3, 0x6, 0x0, @empty, @remote, {[@rr={0x7, 0x23, 0xfe, [@empty, @loopback, @loopback, @remote, @loopback, @rand_addr=0x64010101, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x5f, 0x3, 0x5, [{@remote, 0x9}, {@empty, 0x1}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xd6}, {@broadcast, 0x180}, {@loopback}]}, @lsrr={0x83, 0xb, 0xcd, [@dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x16}]}, @generic={0x86, 0x5, "c9e60c"}, @timestamp={0x44, 0x14, 0xe8, 0x0, 0x6, [0x4, 0x9, 0x1, 0x9]}, @timestamp_prespec={0x44, 0x34, 0x69, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x800}, {@private=0xa010100, 0x6dc}, {@multicast2}, {@multicast2, 0x128}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x6}]}, @timestamp={0x44, 0x24, 0xe, 0x0, 0x8, [0xf50, 0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0xfff]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x4e24, 0x4e22}}}}}, 0x116) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, {0x24, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffff8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x0, 0x0, 0x3, 0xfff9}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002d80)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000002e00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3f, @mcast2, 0x5}, r1}}, 0x30) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002f00)={'syztnl0\x00', &(0x7f0000002e80)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x8, 0x7, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x1, 0x1, 0x8, 0x7}}) sendmsg$nl_route(r0, &(0x7f0000002fc0)={&(0x7f0000002e40), 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)=@RTM_DELMDB={0x38, 0x55, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@in6_addr=@local, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008}, 0x20000000) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003000), 0x24000, 0x0) fsetxattr(r3, &(0x7f0000003040)=@known='trusted.syz\x00', &(0x7f0000003080)='dummy0\x00', 0x7, 0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f00000030c0), 0x1c400, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003180)=[@text64={0x40, &(0x7f0000003100)="48b859000000000000000f23c80f21f8350c0040000f23f866ba210066b8a4e966ef0f01c90f019e00600000c4417dfad00f22dab933030000b825000000ba000000000f3026400fc77cdb00440f78ea2ef2400f0126", 0x56}], 0x1, 0x8, &(0x7f00000031c0)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf}], 0x1) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000003200), &(0x7f0000003240)=0x4) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000034c0)={0x5, 0x10, 0xfa00, {&(0x7f00000032c0), r1}}, 0x18) read$dsp(0xffffffffffffffff, &(0x7f0000003500)=""/186, 0xba) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f00000035c0)={0xa, 0x4e21, 0x0, @loopback, 0x1000}, 0x1c) (async) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000003600)=0x6) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000003640)={0x0, 0x5000, 0x2, r0, 0x7}) (async) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000003680)={0x5, 0x0, 0x3, 0x8, 0x2, 0x0, [{0x32, 0x1, 0x100000000, '\x00', 0x1206}, {0x9, 0x6, 0x4e, '\x00', 0xa}]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000003780)={0x5, 0x0, &(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000003880)={r7, 0x5, &(0x7f00000037c0)=[0x4, 0x9, 0x100, 0x1ff, 0x5], &(0x7f0000003800)=[0x3f, 0x6], &(0x7f0000003840)=[0x8001, 0x3, 0x8f]}) (async) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000038c0)={[0x0, 0xdddc0000, 0x4, 0x3000], 0x9, 0x2, 0x9}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e00)={r0, 0xe0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000003b80)=[0x0], &(0x7f0000003bc0)=[0x0], 0x0, 0xd3, &(0x7f0000003c00)=[{}], 0x8, 0x10, &(0x7f0000003c40), &(0x7f0000003c80), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000003cc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0xe, 0x1a, &(0x7f0000003940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x5, 0x6, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @jmp={0x5, 0x1, 0x3, 0x1, 0x2, 0x20, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003a40)='GPL\x00', 0x0, 0x2d, &(0x7f0000003a80)=""/45, 0x41100, 0x2, '\x00', r2, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000003ac0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000003b00)={0x0, 0x9, 0x8, 0xf}, 0x10, r8, r0, 0x9, &(0x7f0000003f00)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000003f40)=[{0x4, 0x3, 0x7}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x5, 0x5, 0x6}, {0x4, 0x4, 0xb, 0x3}, {0x0, 0x2, 0x8, 0xb}, {0x2, 0x4, 0xf, 0x7}, {0x0, 0x3, 0xa, 0x1}, {0x2, 0x5, 0xd, 0x4}, {0x5, 0x1, 0xd, 0x3}], 0x10, 0xed4}, 0x94) 1.722363685s ago: executing program 1 (id=2027): add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x5a, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74102a5b00", 0x31303553}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.593720418s ago: executing program 6 (id=2031): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_extract_tcp_res(&(0x7f00000000c0), 0x9, 0x7) syz_emit_ethernet(0x26, &(0x7f0000000140)={@local, @multicast, @val={@val={0x88a8, 0x1}, {0x8100, 0x2, 0x1, 0x1}}, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x7, 0x7, 0x0, 0x0, "1d34b777886238c7"}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x10, 0x80, 0x8, 0xfe, 0x0, 0xfd, 0x4, 0x2000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0x200, 0x103) getdents64(r3, &(0x7f0000000000)=""/48, 0x30) getdents(r3, &(0x7f00000005c0)=""/203, 0xcb) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) 1.592380019s ago: executing program 6 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000080}, 0x0) 1.592031342s ago: executing program 1 (id=2033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getgid() getgroups(0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004a40)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000009900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0xff0b, 0x2) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 1.507632703s ago: executing program 1 (id=2035): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1.422291765s ago: executing program 1 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) (async) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.422004187s ago: executing program 1 (id=2038): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000140)=""/4096, 0x1000) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000001180)={0x0, 0x8}) syz_usb_connect(0x5, 0x25c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xd9, 0x9, 0xe, 0x40, 0xf9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}]}) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x6}) 1.173764641s ago: executing program 7 (id=2043): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff0a000e001c165d"], 0x34}}, 0x10) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xd, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x21}, {0x6, 0x794, 0x6, 0x80000000, 0xfffffffffffffffc, 0x1c000000, 0xfdcc, 0x5}, {0x16, 0x1ff, 0x0, 0x278}, 0x65, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@local, 0x34ff, 0x2, 0x3, 0x40, 0x2, 0x9, 0x4}}, 0xe8) syz_emit_ethernet(0x42, &(0x7f0000001480)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0xc, 0x11, 0xff, @local, @mcast2, {[], {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xa, 0x0, @void}}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf256000000008000300dea00a5194260403c7d58296c3d55c01cab3763afb5c80406555c8a3b39467c8c45bb271bc736dabb0b80a4ec76b4014c8b16b321ef0fb100fe069a1e4ab8a00c6a419fb684e4544fcc31de5a224f252a7ca04d3dd8dd669c267d5f033fcb7b16736783e95f0132b36d75f86bde6dd4c1ae73f5034885e33705b8e74abc88361c803ca", @ANYRES32=r4, @ANYBLOB="0600b100007000000600b100d10000002c002a0072060303030303038c107b040861ff4d4ac26790e7be264c79533c040032a50000060101010101010600b100580b0000"], 0x60}, 0x1, 0x0, 0x0, 0x4855}, 0x2404c040) (async) syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) 1.014646468s ago: executing program 7 (id=2044): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4, 0x3, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x7800, 0x7, 0x35e1, 0x6}}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x101}, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@raw=[@generic={0x1, 0xb, 0xa, 0x7, 0x3}, @generic={0x40, 0xc, 0x2, 0xb, 0x8001}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000080)=""/51, 0x41000, 0x20, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000280)=[{0x2, 0x4, 0x1, 0xa}], 0x10, 0x9}, 0x94) syslog(0x2, &(0x7f0000000380)=""/4096, 0x1000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000001380)={0x0, 0x7fffffff, 0xb35, 0x200, 0x4, 0x1}) r4 = creat(&(0x7f00000013c0)='./file0\x00', 0x30) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001400)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001500)=0xe8) syz_emit_vhci(&(0x7f0000001540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_disconn_req={{0x6, 0x9b, 0x4}, {0x6}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x1, 0x8, 0xd, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0xd6, 0x2}, {0x2fc}}]}}, 0x23) syz_emit_vhci(&(0x7f0000001580)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001900)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x6, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ldst={0x1, 0x0, 0x1, 0x4, 0xa, 0x0, 0xffffffffffffffff}]}, &(0x7f0000001740)='GPL\x00', 0x5, 0xfb, &(0x7f0000001780)=""/251, 0x40f00, 0x40, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000001880)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0x8, 0xff, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001940)=[r2, r2, r2, r2, r2, r4, r0, r7], &(0x7f0000001980)=[{0x3, 0x3, 0x10, 0xa}, {0x1, 0x1, 0x5, 0xa}, {0x3, 0x5, 0xa, 0x3}], 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008004}, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000001b80)={0x3000, 0x6000, 0x5, 0x9, 0x4}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2000, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)=@ipmr_delroute={0x24, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, {0x80, 0x14, 0x80, 0xc9, 0x0, 0x4, 0xfe, 0x8, 0x1000}, [@RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c4) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000001d00)=0x2, 0x4) r10 = syz_clone3(&(0x7f0000004540)={0x400020000, &(0x7f0000004300)=0xffffffffffffffff, &(0x7f0000004340)=0x0, &(0x7f0000004380), {0x6}, &(0x7f00000043c0)=""/107, 0x6b, &(0x7f0000004440)=""/152, &(0x7f0000004500)=[0x0, 0x0], 0x2, {r0}}, 0x58) stat(&(0x7f00000045c0)='./file0\x00', &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000004680)={{0x1, 0x1, 0x18, r4, {r5, 0xee01}}, './file0\x00'}) r18 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000046c0), 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000004780)={&(0x7f0000001d40)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc, &(0x7f00000042c0)=[{&(0x7f0000001d80)={0x10e8, 0x3c, 0x300, 0x70bd26, 0x25dfdbfd, "", [@typed={0x14, 0x89, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="11087ab0b7654877242769d7f0e0aa730e304ac2682896ca073a9b91eb18ba7a0ed903569d40d46f13e6b4d9e2d7379b37f5d2be8b052730f1f9c20964be272cf4a37d5a33385786fab7ad41d9dfdec4c0008d93205a169d2d32fa9db65585a5265a7bc450c6ee9d457fb3881ca682f87bbb45a226f7473ad5fb2dc0e1cb7045a8b58b7676a37b9e9d9bad2f6b83ddb6dffa35105459bffac2dadf7102e2dda1fa4a87ecb5e558a0966f1b052f63be8b5d4e79f490f1e4445db41f1160150050bd174e87a654c7998b973ae324fcc47cdcdcc2ccb78bb24af7561bcdb7bf7a8b795dbce211b9137a892ff79e34de86d25e58ed3d87499b3758e116933166b7b47b9438bb9f50fae35092786b1427d289656d2f333ea927c148624139dea2a35dd27cccec25515820ad0c7128ae67d8348cf154a9f9c6f57a2dd3ee6bd68d49fc09d169fdc5d4fa9a8371b4138fcb6549c60c207635a6607752f5aaaf97965db9ed54e8930a334db5a2298b1de669531c81407700762ee2fe2a9a667fbbbdcb3d944b629136dcf910555e93e48b4b7530a4c90112c7b484955eb0123cefee81c82ea93377af6014d7eff95d671469e6a6441dc1d72243e6319a66869ddda0351b9d8b884d0dfb491e721a0f49ae5b2eefd0e2f359e07eab1ee8ba9cb37ad08a1f397ac99259348d204ca274472f86ded01cbc62a3d6f07dbb4102f84fef58b1582909d230c946b0f9c349cb53f160cc6677725ff7f69690cdc904679b430c097ddfe2e5694231886f2ab771fe37d559b48b104a20a3090e80062dab1272b7be02db0ddba9e7d945add950a546ccc2f27874d3c9f86757738695e89beda7116a765241bdd7db7e1d849ebbcd9a9042096bea371650bba1fd55ef3dbb7635a1e462f6859714414a9df5e5de734956f25902326609ee975d0cea0a1868f7a3b37869d32123354b1e3a7e4d0bf1eb1bcdb242c9bb3c54d2c5fe4109ea9713bc9a0e0c00c0e2129e10e12bb04eeea2435f99b1d6e32dae4555361f199fdaf1141ea0d6a45c5869fd5c1d48b995e9083657866a196f8a1eeb192f50fa2b1477290c28d81ba4a817892e91132b5d0727b2aee30ea6a3fe6221ae8b0dade35a2b68f2b18a7ec6f9064cbd2f1b6504e88b970888e559a1ae9df4f57c7fc5468429bdb260d21148f35cdab68397affecce0f0f88a1d5ac94b62f383119e8fefe3d6ac83766d0dad8e6849613bc3190d54b0147a9bd0e38174fb80034065e6e0f5ab3d34a0dce8b6243ba213c1ab61616669de0dd570534a2f91db36c5cbc9d34a4ad69fef63d49c64cfc291f8905bbf2cf8c308fd3e76f39759dbab958d74f8bb898278879f96b14e47871f7aa06b94077e7d10b7904d77c15840800e0bc517cdaa600e9d2dfc3975648b3e668c7eac84663c894f44a0a66e1f1d81f17bf8cbd2d9f6b820b5144de63a7e00f01e4a589229e110b36df6dd7bca5a6f602c7ab1fae4c8e7c981992ef00c5e6bccfd28bd2c098696e1816c7120d984f8db17d501b7635c2227c260233408d28215c8223a8db4b09c837c8e73ebc94d5772c499a74dbb38a150b3262cf914a8a47cd5e75a42d53779eaeedf6da584fed92e04c880a998bc1df77bb2c9eab72d09726b1c58de2d8096e82ced32d6c744b094c8d90d73d8219d10b17e2ef4166a20e49e1b6e19170cc81864369d95cb2636188e79f7acd40a2d7f4f8033ca73d8f82f344941934ccc8be471d6ac0209e885746ade260b3d206172ad16e58c02a3de76f3ea3960249cb911d09405270cc2972971a4e7a4271ab5f32266c3dcba3e58003f87eab7eda6a9fbea7051a1b8ff7c42fa08e16b4fc3ef1db42dd8f019db3c9b107a69543d446198a065c7dd3662948be59d02ae4028276d86ddc5da1e35a14095adbf09eebbe38c4131eb411f2101d310f436b1b7c1d9749e20378a75f8de6b9d21a1cfff6a1cb0f757258e1bc234b22ab94286abc7e80368b4d973f1412df59308b10c40a04503511d6166dfada98937b1a1819cdfe069f974e08fb07dc74843c6a5ed63d1abba6a7ac990e8997cbf748eff45c69a82352511c505df2c62fa319ccda7c04ea5fe63d0f42f4b76185e16143eedd0806c67cc27fbe8a41daa31d6cb4490ea4bf6d2c5f74576673968a940c7358336c38c1ce56cf8d5ea9dbb288531d1df683017f46916fd1db765d4e57437437439662e49919bbf9829d87a1dad8f1060e85f7b7f6b2cef30319ae94861274813b44ce18f94d9da2c6875c82009922269ebca776c0d2c4ce5f89f271d39607f9800a6dc98a18f1825bf2012201d68876092c774466a7c9c02e5e4580ae64f1c8598e7349e49254831ec878f31dae7e54b0d42a96a70d9d5b3f8e91d45ca95c0156862c807647451693962c372ab713f563238625df86d60aadc08f08ce2eb13612605225fe19773de398c1652a7cfd1d47c3f84701592b64904b95b67c2b1456663de4620b02dbbac5c54e9837b6ef36b6e66699955fffdc22d55b1720ae43f1db1875ba750f3ec5be1881e07c5aee04c90fedcf0528202c4fb21b649a17cdda5e995b067749de171f5b095092eb6ca8f40c44a9f203e9ec981ae4de4fbd49a4d804ad1289550b8f2d30f10dd329a886cb06d5db2239a01e6ee009e3ac5f1374a83a0be9ad2d109062351a066a524186d3fa9a1c609f230d0253c620d28fed4d72482e52874426cb5dd218069854fa45acaf97fd40311037e93811274cedd96267334af2f4735b4f3e99a2ab2f28a9faed04cef0a384fb5718b3a35d366e223f7170bac017d30f8d5a2bb748eae83ba13cb42b519b606268ea06d3e410be9557c9c6443ec25ee06a88b31aeef7074be8606a9e1983e11949a5905dd20351cf08f4b4fd0630d358eae40f59ef539b0d2a2ef5d41c6211984d4f55e479295c4f3a7e7123401021888e1f05e1be7e66f239ef48f93133769cc2de80e0fab1e6da49a10ad2c17c61b2743e62cdf24b040658499761c9620dbc71f2c3cb950a4681ebe303d8a431e1c6fec84aa29236b96d19f7a9b9528b0d0eec06cf736159ee89851d36df23362c88a59a99f590f9c395fbd369f02505463739d4fc76ae191ce6358a6ac8814aede3d6cf35ca11c06f04781f1eba1bd5c941aad9210b7631371229f55ace49099507575919e5a523cee42b6be8b51177d1a32ddbafbc65adeca0952fa00e0ff3eff371315309f1928f03563bf45ceb3c6faa1fe92a9777984308926e9cfb0450c8f7bcdfc1c778992747223c8adacc8d06edf6bb6308180e04c11f8a811bd235d94f7be600cb0ee62679970e76c834a94b9618c9a4cc5de992cd5877c3bb04441f3152881d1928a1a11d8120179468116c4dd5499989eea08ef5e160cf41d6c8a0c36a8a74a437fff85b5aebd0c2eddc621e06b0d3af4cba0493cba352b020ac59241e371010065cb6878d9161e0c127101910c08f78455e43787df0708c898a00d5546ad60a49c7b193b14c6045eacafb0c52c6d9297670d3e3aca22af85738e659b3efe33775c882bdf6148f773ee83c9219bb1f3ab835111c56638a4b4c659eacf10ff3a644ba98224d34c7ad4e410417dcb9428a46df6bf17a9986e7416e97bed8b98bc5c690323df5972d8d9e995c200060732f0de6bb66c8a2e74af2af9c84482262abe30039b60dd3a5d2a73298323982b9f4dbcd7b7e436d42a59a8389a61edbe483b365257b2dc305ed3ee56d58e6e2e5ff2c7a70ba02461d1dc54b7a4731d49378ed79ada924e744dba3e860ee02c07efddd944f32c9cc1f10e30f54f02d1ca2922da3ac4e8314ac83f3a7392bf29f280ad1ed2700289864336d32e98447838e71b349649bb2055249fe873682d818367b148059ad76b5151487dc91f9c49d696b502fddeddb566b7d736437c26073535481545207db3cf3b2ad5b60e23cb3a0b0348bdb0cefc063bf4092acd881fd7691cf51a0ddbcb80d58f82c34dae71273644ab5e3d400894392cd1ab0328809b50206fdb26c335065769723a0b3892a562842cccae6c2b15808c2d442ba6ff7dec859cfb0cee5bdd1b5c6972619739c8cab876ac0d1ba37ca3dd1fa3da99f39635c2c066db7e9babe1a4e07dd1a28b8aa6e9853c1a2e68d10d9aadc2970f2a4ecbb76f24abd23a5f317118d37ecc4138b7dd3f41de631408453ba3e957db9c1d9007bc06104b656cfa0d802e88bb41fb840bc830ab820403cdc54c970bedde11d7d22323f560c81473902af5a910d5ccc6e6b0ceba4994787f2e0e9ea98baa84ca61554c399912e069c19dc885609709369a147dbdf993d1db4e9cd6481a2bc2be60e77f4490d604ced394168013357f7c06980e5521a2d0de823e33887a1b03be9d52e9990862b719acbb36464227b313aca89bba880c2c7a45ec3c5ba6e98551e6d53e9114a5cfc946e617133ca539e1382f1f20e03ad6b2006daaf02c2b616d38ae35c3b6b312f1b9c79b906531b0f39fc6e34635f17485ca39a27ed8aabd7a84543ba8a45ddd81389376071935540dfcbb0a85890d9889a59a9bf716f8e08673b5f72514383e61ed743d4b449ae559c65a14b8ec7cc33fe86355bcf7eaa1ed4cb3d4d1cfe3d6e0217cf10b2937159fae6cfdb643d416cfb21739d6d618c4a9a02aa3fb560a8686af235da07b55d3a7a59b1a346ae3db20a4343088af5318b7556d8480467fd707ae7c351bc05313ddf3f7313b64e5faa4b746fd4402979d30c50b32e5c173f3195b4b5ecfd250b1b9c19b31c74e6f1a8f50f0385c4e775dfc28f1c9196d5747574ffcfb5f27e0f58899a3860d8d1ae0c3d370b3a032130f56d7523cfaec60106535c4bb59625362a61996ec75cc4aec3ec264cac3110182d1637beca67b3c49ddf70444da107d0d41a75003a8d3badd69ae7cbf1c069622daaaf7c8f9e06629f5f218fb3230dfc399fc20c212c890db1c81914fd73fdbd0a7192c369254975e671f6635f84781908a7289cd023aa1f1718de41300357702cd0ed318cff1a20687e7859506180fcfa2e9e108070f5f4fc229997a393d98e5db64abab6599d7dee8a0d2bdebc9aad7247f85190685494d9c54468822f9d12ae50017ec910379598bceadf00e19ce5d83e193c67b7a39f22127faf5e97a561b120f0dd5cbd92fd8db2d187698f458aef710a6afc2ad3f3396f32644158be99f567018e716e392e9b458eaf1c7d6b29015eee5a75e9cbc3f92a4684c35746612fff90230f5d8836499f9f8ab0cebc4142e7afe3675b2a8b68fca3460ebc496cff317e5e2174ea2842450c690fcc240785a09c917a834b7182a629d09275e924dfc4731e479c5db8295e31c21b508efce6f6efc736b84c81c28a1c2e50da205fc14dfae31725f1722290503eb2c368a85ff881958a1dd892cab21837dacfef8954358e0071d3f4dc13d3667e4bfd322f1ab36786498e25d17c74cf68eb4d56a9824d75356e8ea5b2a6e184552b15a0e71d852fecd2f6619490ba20783c626de78fead858e1c8600c0a245859a703f4efec0ae294240afb5507c105da025ec0d0f04659427f5428447e213294104699fc7924da1544cfcdd37a0fa552ef35e73e3552120cb69d28fd59bdd02381e86251fd39b2aca7f64f212b4893155f98448c03d204318a4ccfaff068bc59487ccb91f68979ef36f322f6657950366c310d1964fac46c30309441c4eee1ef66b7bc039669334a7b0c4b21944f9aee032b68ac131eb5aa3efa8cda5142de69df68bb047a465e257052c3d81d1a6c420f2c358642ff650133908067e1ec41db6", @generic="9192641af3cfae1a6942ce863e239ba4ca0bd86c0bb83040c5362d81eed63666f40bada556918adcccb7532c4687295cdb80ac6acebed26ca03191380e9bd6f68061e0b68c9d7cd5c3ea3cc0bfd808242a626c5a8fdc178d9df04fce496ad0c3318f897e9bac3f8f209b299b4b3bd69384c8a9393257c65568054dea6347c1bcf6c4e8e79b46a3c4b1fd95d3ecb275a1382fe170f5a4af3dce40cdffca49523340d1e3cf05c5e40090f22cd0db1f716b0f8f817eb4d6021be3be4186ca3c75a0e784"]}, 0x10e8}, {&(0x7f0000002e80)={0x1258, 0x1e, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="d056975f5c70488dd1628d5aa35e8a47f9a5a8b061d19736c1e2323cb36df80ef8", @generic="31e1bccd451440d9bed9c44894b8ab30af4d5ff03b47136a1338084cd88f804d69", @nested={0xf4, 0x10e, 0x0, 0x1, [@generic="17b6a9ad06d1bb3f597d11ae5c6499040cab48fe18c2b40ee40c946b39d842e7d3cceb3d13fa52218093fbfad060dbd0f2723a2e54eae6de831fd469e709e3e067860869fe39e17b4da54a476cd6c67769987010610b0dd1b1892539baa449770421476467f78330432b007362e65924b0a559ffbadf9d6e25b6566137a5660bc548492ce2a31c6ed544be38fe5d31d5cbb1b439bcdd136f7928b058f509a500bd76f096e3b5c4ee59d990f1615b5d33428e7247ddd445919f3f13b808da7e48c69c519765e836dd149d1bacc33afc7db72cd40e08f6d5fdf9d1b3c88c5f", @generic="028c0d6f1fffb338c0d57a3f510e6bf9586a"]}, @generic="f1d2d49cff93ab3b805d2661964d97091b4123d7e0b511e443f32b7eac96db311cd675", @generic="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", @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x101}, @typed={0xe3, 0x48, 0x0, 0x0, @binary="68a42bb4089b10543f103a8f8e3fa2c2577ee40f632960817c85bea6a0c3d6914678edb3f292ef47cf1877c18870261f72f14cc0efb1577ec4fc1606aa2207b5d467ffc45b912c7439b80ad2bfff67ad66ca745514e43e1d37ec6854464f2f963201c25c999defd612aceda35b4bd9d211388134cab9a80667e1dc9d84cb57c48cb55e5435faa64d8e504c089a45e4082fa681bac5aab5763feafca62fedd97006161b5a95e005ab5dbf4aea26715e3c581737a43f0a2f0b1b062983d8b3840138cded8cd4ffe4fcaa90aad8c6890000183f7c5ce7b43321e732624285105d"}]}, 0x1258}, {&(0x7f0000004100)={0x1bc, 0x28, 0x800, 0x70bd28, 0x25dfdbfc, "", [@nested={0xfc, 0x7c, 0x0, 0x1, [@typed={0xc, 0x71, 0x0, 0x0, @u64=0x55f}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a32eec676db31f98254bf6ca017e54892e3b468cc47f9e946614a6a3e06f5ce991259c0964ee943500f09c6d382b9136e24fe469f617dc46d2bc5530f39b0f1080787061c643d3640ec04ffb2b1558b5eb1bdf2d635767f6501d257905fe1a1a5af4ec99fd7ebca288e9af5e31ddd492", @generic="4e3dcf62a3aa95aabd19580f48d4b1be6189e702246b4dd42aa80ed554a7d7686e7c1a537c9bbe3d681339105db44cf94f48054442a3196121a9e34e63f79ce067fa4da181d3b9282a783eb83d1dacee2cca1b71bb1f4a0a714c200ca918", @generic="ad7d", @nested={0x4, 0xef}, @nested={0x4, 0x7}]}, @typed={0x4, 0x6f}, @typed={0x8, 0x122, 0x0, 0x0, @uid=r5}, @nested={0x6c, 0x7f, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @uid=r5}, @generic="2c97a390578d7ed5acd1628b12b2670d8a09baee6e8c4ba90822868a56e099f032ea3669f3d7ff0d10ebdc6cd679e732e6d8865e1dcbb71cead4972b8f5312febe58fde56909535d0473151bf2ca4c53b2948cfff8d6ac580756b748e65b809f"]}, @generic="a3cf08f461b6dbbb89b405f347721708501c929e0de05dec049902e98eea4d714a9b1ce65399c5a3e2998796e7261188ead583c059"]}, 0x1bc}], 0x3, &(0x7f0000004700)=[@rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r17}}}, @rights={{0x20, 0x1, 0x1, [r18, r9, r9, r3]}}], 0x58, 0x40c8050}, 0x24044810) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r19, 0x8914, &(0x7f00000047c0)={'batadv_slave_0\x00', 0x200}) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000048c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20010001) syz_emit_vhci(&(0x7f0000004900)=@HCI_VENDOR_PKT, 0x2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r18, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x34, 0x140f, 0x800, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000015) sendmmsg$unix(r0, &(0x7f0000006240)=[{{&(0x7f0000004a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000004ac0)="2f5292f8bb17fd654f39bf04b8e05f1d5e34fed12dbca8624ffdcc9b10840fcea3958bd68a23908a29818f9ebb78097a52189dbabc477a4c5097f69466103ac694261ce115adb04603b4c56256f1607dfe3afea625b6fd98b5bcfb55812a9488caf1568c", 0x64}, {&(0x7f0000004b40)="81a3338102d945e5ec779b769c25af062f4d137c930d7707fafc4eb5ce577f17723333aa47593a8459f433b4e315f542d8bd4347b3dba7163b4271f769af4c65df533845538d74cffc05a2eab3991d7b74a0cedf2ef425d87aacac1fbdc00de9d7d64bd3759dfd", 0x67}, {&(0x7f0000004bc0)="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", 0x1000}, {&(0x7f0000005bc0)="9807147d786d3b0348a577479cbc839c5fe5ed87a853aa20b82c553563d269af6291938aaf0dc8c7b1f1f63b525ab138bf102a5f5eba4151976299e700", 0x3d}, {&(0x7f0000005c00)="b9fa5cc04b2357783d78742fedfd317ec898c0f4d2c7edaa207e2bceb2fe33cc368f6a5dfc55b6442e47881763e4ce2d8f08353e3552e09be6c2247973aab4843b6dc2904d3608257e6a33b1f61c3c862e8d53a2daf0fb448c76c09d91ae46cb0904dddaafa006c5ce4fab2b043f114f9c911d82b4f7bba2f8abe2f756c0d55756f452e7cb0be3aaac505dfa2a", 0x8d}], 0x5, &(0x7f0000005dc0)=[@rights={{0x18, 0x1, 0x1, [r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r17}}}, @rights={{0x2c, 0x1, 0x1, [r3, r19, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r18]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r15, r7]}}], 0xa0, 0x200040d2}}, {{0xffffffffffffffff, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005e80)="a4", 0x1}, {&(0x7f0000005ec0)="cdccdd9d5770027cc99ccfae3fb1890b7b0bd7dc599f3d84c0eaee2063f4d5a74b02e031ff6a649a2ed73594b853c5ae6c2ce3ed8b2c531e22896c2b3ec75a626d8f129924c18facf105983395840a39f4cf2fdcd449eceb39ab6a734e9ff2f46a008a8d63374af011eca37f106082dc021419b0b56b27bb10d62b492af0844aa6d6a9e27082d90c6d90d7bf6d568e0b239a7a33fc8d359ef82bad262afe61c666290396e338aa408a79fd2386b01f69493f451e88eb461000d622b53e6eb19ba94c010e5d4236a3d69941d963b75a7c66ea3527739f7776c9266574011d78ced8d5ae63434743cc28e4720a54aafabbf6ac630ff312190a", 0xf8}, {&(0x7f0000005fc0)="bc1750449b9c7bf5d4cb9b9bfc952fd2abe9a445638586c7395ea2935af4061543dd2daeba8a43a498d12b662a2fe06819ef16f3087481914a8ffbc01bde5d1fbeac1c3893dbfb", 0x47}, {&(0x7f0000006040)="c07e33b9094b91a5b2710ee6a9fdd52972f897d17070cbe58ca047bf225d827eaf39e72fc6212a11e04e39bf", 0x2c}, {&(0x7f0000006080)}], 0x5, &(0x7f0000006180)=[@cred={{0x1c, 0x1, 0x2, {r10, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, r16, r14}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r15, r7, 0xffffffffffffffff, r11, r9, r9]}}, @rights={{0x1c, 0x1, 0x1, [r9, r3, 0xffffffffffffffff]}}], 0xa8, 0x20000040}}], 0x2, 0x4080800) 906.940439ms ago: executing program 7 (id=2046): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x180000}]}}, 0x0, 0x26}, 0x28) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) pread64(r1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e}, 0x6d) 906.705042ms ago: executing program 7 (id=2047): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x835, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff], [0x3ff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) r6 = epoll_create1(0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa0028000}) 791.866516ms ago: executing program 7 (id=2050): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000100)=0x320120) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, 0x2}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x40, 0x1, r3, &(0x7f0000000280)='./file0\x00') readv(r4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) dup2(r4, r3) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYRESOCT], 0xb4}}, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "0f8a6c93aa0de0ecc302132d5b053568"}, 0x11, 0x1) 631.796473ms ago: executing program 6 (id=2052): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001de00000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000010014000000030a010100000000000000000100000040000000060a010400000000000001800a00010072656469720000000400028008000b40000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0x9c}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) times(&(0x7f0000000000)) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x7fff, 0x101002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xfffffff7, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x4, 0x9d86, 0x9, 0xfefffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @random="52dc97182989"}, 0x10) 385.870401ms ago: executing program 6 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x92, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@ignoreqv}, {@version_u}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\\$)\x1f,\\'}}, {@noxattr}], [{@audit}, {@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r2}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006800210528bd700000000000020000000000000000000b000800010001000000"], 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 366.926839ms ago: executing program 6 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000c8140000090012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000c8140000090012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) (async) 307.203211ms ago: executing program 6 (id=2057): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0xffff, 0x3231564e, 0x0, [0x2], [0x2000, 0x0, 0xc7], [0x7fffffff, 0x3, 0x0, 0x2], [0x43e, 0x0, 0x0, 0x200]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x4}}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ace3587ce8ba12d285b6853bc4dc54c6910c1d6656cc1a0000f2238d2bcdf84c2602ec78b313873fc63ac077b5136a0074f7642471073be08b7b9c924072f100860186fcedebfc0900798b8ee7d7c2c9b54725008175ba6e404cf329f71286418a8a"], 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000240)={{r0}, "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"}) sendto$inet6(r0, &(0x7f0000000000)="d2b1", 0x2, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 304.206758ms ago: executing program 5 (id=2058): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x80, 0x780, 0x100, 0x4, {{0x1b, 0x4, 0x3, 0x6, 0x6c, 0x65, 0x0, 0xff, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x36, 0x3, [{0x2, 0x8, "23f5f6c0a12e"}, {0x6, 0x4, "cc43"}, {0x0, 0xe, "89b63e4488894309726bf19f"}, {0x5, 0xd, "6517696afb39dcda0bcfc2"}, {0x1, 0x3, "a3"}, {0x1, 0x6, "51590cec"}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x4b, [@remote, @remote, @multicast2, @broadcast, @loopback]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@private2, @local, @mcast2, 0x200, 0xfffe, 0x7f, 0x500, 0x101, 0x800000, r5}) 235.882263ms ago: executing program 5 (id=2059): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x80003, 0xff) (async) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_mreq(r2, 0x29, 0x7, &(0x7f0000000680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) socket$inet6(0xa, 0x6, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'\x00', {0x2, 0x0, @empty}}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'\x00', {0x2, 0x0, @empty}}) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRESHEX=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x80) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) 157.262067ms ago: executing program 5 (id=2060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)={0x4, 0x0, [{0x0, 0x776, 0x5, 0x800, 0x800, 0x2, 0x8}, {0x80000019, 0x3ff, 0x4, 0x890, 0x1, 0x7fff, 0x6}, {0x6, 0xff, 0x2, 0x6ea9, 0x9, 0xd1fa0000, 0xd63cec2}, {0x0, 0x8, 0x0, 0xe4, 0x1e02c00, 0xff, 0x6}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000240)={0xa, 0x18d, 0xc0000, {r1}}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0x400, 0x100000002, 0xfffffffffffffffd, 0x4000003, 0x11edc694, 0x6}, 0x0, 0x0, 0x0, 0x0) 155.283419ms ago: executing program 5 (id=2061): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00}, 0x11) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) 86.641517ms ago: executing program 5 (id=2062): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x0) 0s ago: executing program 5 (id=2063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {r1, r2/1000+60000}}, 0x100) (async) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1f, 0x90000) ioctl$I2C_TENBIT(r3, 0x704, 0x1) ioctl$I2C_SLAVE(r3, 0x703, 0x0) (async) r4 = syz_io_uring_setup(0x178b, &(0x7f0000000580)={0x0, 0x4, 0x13291, 0x0, 0x138}, &(0x7f0000000100), &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000540)='pstate_sample\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r8 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r9, 0x8934, &(0x7f0000000040)=':') ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r12 = syz_open_dev$dri(&(0x7f00000007c0), 0x8001, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xb, 0x1, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x20, 0x7800, 0xfffffffe, 0xfffffff7}}) (async, rerun: 32) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES64=r6, @ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000), 0x5, r11, 0xeeeeeeee}) (async, rerun: 64) mmap(&(0x7f0000625000/0x2000)=nil, 0x2000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x706d3000) (async, rerun: 64) io_uring_enter(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0xb, r14}) setsockopt$inet_mreqn(r0, 0x0, 0x71c18d2337bd4041, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) kernel console output (not intermixed with test programs): onnection closed [ 132.228483][ T6251] vhci_hcd: stop threads [ 132.232482][ T6251] vhci_hcd: release socket [ 132.233937][ T6251] vhci_hcd: disconnect device [ 132.385023][ T9553] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 132.458219][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 132.458257][ T40] audit: type=1400 audit(1756139497.852:25091): avc: denied { listen } for pid=9564 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.475123][ T40] audit: type=1400 audit(1756139497.861:25092): avc: denied { accept } for pid=9564 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.892588][ T9593] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1008'. [ 133.004382][ T40] audit: type=1400 audit(1756139498.367:25093): avc: denied { setopt } for pid=9598 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.098410][ T40] audit: type=1400 audit(1756139498.460:25094): avc: denied { read } for pid=9604 comm="syz.1.1012" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.108972][ T40] audit: type=1400 audit(1756139498.469:25095): avc: denied { open } for pid=9604 comm="syz.1.1012" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.412901][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1019'. [ 133.419149][ T9625] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 133.830920][ T9635] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1020'. [ 134.000035][ T40] audit: type=1400 audit(1756139499.293:25096): avc: denied { lock } for pid=9645 comm="syz.5.1024" path="socket:[34470]" dev="sockfs" ino=34470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.010949][ T40] audit: type=1400 audit(1756139499.293:25097): avc: denied { setopt } for pid=9645 comm="syz.5.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.160441][ T40] audit: type=1400 audit(1756139499.442:25098): avc: denied { unmount } for pid=9201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.179115][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 134.181965][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 134.250696][ T5333] Bluetooth: hci4: command tx timeout [ 134.264168][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1029'. [ 134.268604][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1033'. [ 134.385313][ T9686] bridge_slave_0: default FDB implementation only supports local addresses [ 134.406296][ T40] audit: type=1400 audit(1756139499.676:25099): avc: denied { ioctl } for pid=9692 comm="syz.6.1040" path="socket:[36358]" dev="sockfs" ino=36358 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.435164][ T40] audit: type=1400 audit(1756139499.704:25100): avc: denied { ioctl } for pid=9697 comm="syz.4.1042" path="socket:[37757]" dev="sockfs" ino=37757 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.491762][ T9703] loop7: detected capacity change from 0 to 7 [ 134.497901][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.502145][ C3] buffer_io_error: 25 callbacks suppressed [ 134.502163][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.508917][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.512742][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.516301][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.520296][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.523887][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.527521][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.532187][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.536083][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.540352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.544100][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.547933][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.551806][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.555536][ T9703] ldm_validate_partition_table(): Disk read failed. [ 134.560926][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.564616][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.568251][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.571210][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.577454][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.579059][ T9712] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 134.582227][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.586588][ T9703] Dev loop7: unable to read RDB block 0 [ 134.591444][ T9719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1049'. [ 134.591618][ T9703] loop7: unable to read partition table [ 134.606176][ T9703] loop7: partition table beyond EOD, truncated [ 134.609280][ T9703] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…0ýÞý©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 134.661594][ T9733] sctp: [Deprecated]: syz.1.1053 (pid 9733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.661594][ T9733] Use struct sctp_sack_info instead [ 134.705351][ T9740] validate_nla: 2 callbacks suppressed [ 134.705367][ T9740] netlink: 'syz.6.1054': attribute type 30 has an invalid length. [ 134.719514][ T9732] virtio-fs: tag not found [ 134.801951][ T9748] ALSA: seq fatal error: cannot create timer (-19) [ 134.837638][ T9762] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.840779][ T9761] IPv4: Oversized IP packet from 127.202.26.0 [ 134.843237][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.846186][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.880785][ T9769] serio: Serial port ptm0 [ 134.953708][ T5980] Bluetooth: hci4: unexpected event for opcode 0x041c [ 134.956078][ T5980] Bluetooth: hci4: unexpected event for opcode 0x041c [ 135.075246][ T9792] syzkaller0: entered promiscuous mode [ 135.077630][ T9792] syzkaller0: entered allmulticast mode [ 135.091810][ T5980] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 135.302580][ T53] IPVS: starting estimator thread 0... [ 135.413168][ T9806] program syz.6.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.416023][ T9804] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.854292][ T56] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 136.055106][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.059404][ T56] usb 6-1: config 0 has no interfaces? [ 136.064209][ T56] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.067789][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.072860][ T56] usb 6-1: Product: syz [ 136.074612][ T56] usb 6-1: Manufacturer: syz [ 136.076425][ T56] usb 6-1: SerialNumber: syz [ 136.080402][ T56] usb 6-1: config 0 descriptor?? [ 136.375875][ T9829] netlink: 'syz.5.1081': attribute type 1 has an invalid length. [ 136.729554][ T56] usb 6-1: USB disconnect, device number 9 [ 136.733900][ T9829] bond1: entered promiscuous mode [ 136.735780][ T9829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.754101][ T9830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.757478][ T9830] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 136.762422][ T9830] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 136.771867][ T9830] bond1: (slave ip6gre1): making interface the new active one [ 136.775742][ T9830] ip6gre1: entered promiscuous mode [ 136.779345][ T9830] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 137.255104][ T6538] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 137.325522][ T9869] can: request_module (can-proto-5) failed. [ 137.415092][ T6538] usb 11-1: Using ep0 maxpacket: 8 [ 137.415104][ T841] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 137.428922][ T6538] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.431549][ T6538] usb 11-1: config 0 has no interface number 0 [ 137.433617][ T6538] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.437349][ T6538] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 137.440945][ T6538] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.444390][ T6538] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 137.450835][ T6538] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.454958][ T6538] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.458381][ T6538] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.462265][ T6538] usb 11-1: config 0 descriptor?? [ 137.471041][ T6538] ldusb 11-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 137.496588][ T5980] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 137.514001][ T5980] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 137.596839][ T841] usb 10-1: Using ep0 maxpacket: 16 [ 137.599970][ T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.603626][ T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.606985][ T841] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.622155][ T841] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 137.628163][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.633959][ T841] usb 10-1: config 0 descriptor?? [ 138.089209][ T841] hid_parser_main: 73 callbacks suppressed [ 138.089224][ T841] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 138.094531][ T841] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 138.096933][ T841] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 138.120638][ T841] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 138.122911][ T841] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 138.126991][ T841] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 138.160878][ T841] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 138.176915][ T841] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 138.292766][ T9864] netlink: 'syz.5.1092': attribute type 2 has an invalid length. [ 138.296416][ T9864] __nla_validate_parse: 5 callbacks suppressed [ 138.296431][ T9864] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1092'. [ 138.307558][ T6028] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 138.307755][ T56] usb 10-1: USB disconnect, device number 3 [ 138.312818][ T6028] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 138.323827][ T6028] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 138.328334][ T6028] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 138.493380][ T9897] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 138.502013][ T9897] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.505286][ T9897] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.541008][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 138.541020][ T40] audit: type=1400 audit(1756139503.549:25115): avc: denied { associate } for pid=9900 comm="syz.4.1103" name="701" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 138.789380][ T40] audit: type=1400 audit(1756139503.773:25116): avc: denied { mount } for pid=9906 comm="syz.4.1106" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.887711][ T40] audit: type=1400 audit(1756139503.867:25117): avc: denied { unmount } for pid=6729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.317885][ T40] audit: type=1400 audit(1756139504.269:25118): avc: denied { load_policy } for pid=9925 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.330501][ T9926] SELinux: ebitmap start bit (4279173126) is not a multiple of the map unit size (64) [ 139.340648][ T9926] SELinux: failed to load policy [ 139.397362][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 139.451930][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 140.232301][ T1476] usb 11-1: USB disconnect, device number 2 [ 140.242030][ T1476] ldusb 11-1:0.55: LD USB Device #1 now disconnected [ 140.454213][ T9938] ptrace attach of "/syz-executor exec"[8829] was attempted by ""[9938] [ 140.462628][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 140.572969][ T40] audit: type=1400 audit(1756139505.447:25119): avc: denied { listen } for pid=9947 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.581611][ T40] audit: type=1400 audit(1756139505.447:25120): avc: denied { listen } for pid=9947 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.589416][ T40] audit: type=1400 audit(1756139505.447:25121): avc: denied { accept } for pid=9947 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.600854][ T9948] netlink: 'syz.4.1118': attribute type 10 has an invalid length. [ 140.603380][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1118'. [ 140.606530][ T9948] dummy0: entered promiscuous mode [ 140.609607][ T9948] bridge0: port 3(dummy0) entered blocking state [ 140.612714][ T9948] bridge0: port 3(dummy0) entered disabled state [ 140.615245][ T9948] dummy0: entered allmulticast mode [ 140.620659][ T9948] bridge0: port 3(dummy0) entered blocking state [ 140.623218][ T9948] bridge0: port 3(dummy0) entered forwarding state [ 140.794611][ T9961] netlink: 'syz.5.1122': attribute type 10 has an invalid length. [ 140.801102][ T9961] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.939614][ T9966] hub 1-0:1.0: USB hub found [ 140.943353][ T9966] hub 1-0:1.0: 2 ports detected [ 140.951095][ T9966] XFS (nbd5): no-recovery mounts must be read-only. [ 141.107465][ T841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 141.126423][ T9973] Can't find a SQUASHFS superblock on nullb0 [ 141.223965][ T40] audit: type=1400 audit(1756139506.056:25122): avc: denied { ioctl } for pid=9981 comm="syz.6.1129" path="socket:[39344]" dev="sockfs" ino=39344 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.231800][ T40] audit: type=1400 audit(1756139506.056:25123): avc: denied { setopt } for pid=9981 comm="syz.6.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.265575][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 141.275112][ T841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.277748][ T841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.281502][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.288222][ T841] usb 6-1: config 0 descriptor?? [ 141.297171][ T40] audit: type=1400 audit(1756139506.130:25124): avc: denied { bind } for pid=9985 comm="syz.4.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.314756][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 141.318370][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 141.321938][ T9987] netlink: 'syz.4.1131': attribute type 13 has an invalid length. [ 141.325245][ T9987] netlink: 'syz.4.1131': attribute type 11 has an invalid length. [ 141.382908][ T9991] program syz.4.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.435955][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 141.441472][ T1115] ata1.00: irq_stat 0x40000000 [ 141.443762][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 141.447315][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 23 [ 141.447315][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 141.457228][ T1115] ata1.00: status: { DRDY ERR } [ 141.459216][ T1115] ata1.00: error: { ABRT } [ 141.461032][ T1115] ata1.00: device reported invalid CHS sector 0 [ 141.512479][T10003] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 141.528512][T10003] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 141.570191][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 141.679306][T10016] syz.6.1138 (10016): /proc/10015/oom_adj is deprecated, please use /proc/10015/oom_score_adj instead. [ 141.733761][ T841] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 141.736584][ T841] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 141.738748][ T841] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 141.740906][ T841] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 141.743073][ T841] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 141.745797][ T841] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 141.943478][ T9965] i2c i2c-2: unsupported multi-msg i2c transaction [ 141.947310][ T9965] netlink: 'syz.1.1124': attribute type 32 has an invalid length. [ 141.953205][ T841] usb 6-1: USB disconnect, device number 10 [ 142.202767][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 142.419476][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 142.422401][ T1115] ata1: failed to read log page 10h (errno=-5) [ 142.425155][ T1115] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 142.428510][ T1115] ata1.00: irq_stat 0x40000000 [ 142.431280][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 142.434009][ T1115] ata1.00: cmd 61/00:58:26:8f:04/01:00:00:00:00/40 tag 11 ncq dma 131072 out [ 142.434009][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 142.442838][ T1115] ata1.00: status: { DRDY } [ 142.445476][ T1115] ata1.00: configured for UDMA/100 [ 142.447803][ T1115] ata1: EH complete [ 142.733422][T10067] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 143.081152][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 143.087313][T10081] bridge0: port 3(dummy0) entered disabled state [ 143.089868][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.193314][T10086] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 143.732942][T10111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10111 comm=syz.4.1172 [ 143.839065][T10120] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 143.843024][T10120] binder: 10119:10120 ioctl 4018620d 200000000100 returned -1 [ 144.052591][T10153] batman_adv: batadv0: Adding interface: dummy0 [ 144.064660][T10153] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.074673][T10153] batman_adv: batadv0: Interface activated: dummy0 [ 144.084474][T10168] loop6: detected capacity change from 0 to 7 [ 144.120602][T10168] Dev loop6: unable to read RDB block 7 [ 144.122472][T10168] loop6: unable to read partition table [ 144.125075][T10168] loop6: partition table beyond EOD, truncated [ 144.126944][T10168] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 144.136853][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 144.136864][ T40] audit: type=1400 audit(1756139508.778:25140): avc: denied { setattr } for pid=10169 comm="syz.5.1186" name="file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.157112][T10175] block nbd1: Attempted send on invalid socket [ 144.160272][T10175] blk_print_req_error: 10 callbacks suppressed [ 144.160282][T10175] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.169119][T10175] FAT-fs (nbd1): unable to read boot sector [ 144.186743][T10185] block nbd1: Attempted send on invalid socket [ 144.189574][T10185] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.192466][T10185] FAT-fs (nbd1): unable to read boot sector [ 144.254379][ T40] audit: type=1400 audit(1756139508.890:25141): avc: denied { ioctl } for pid=10194 comm="syz.6.1192" path="/81/file0" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.265198][ T40] audit: type=1800 audit(1756139508.899:25142): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1192" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 144.400580][ T40] audit: type=1400 audit(1756139509.030:25143): avc: denied { getopt } for pid=10204 comm="syz.6.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.477149][T10223] __nla_validate_parse: 6 callbacks suppressed [ 144.477167][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 144.515020][T10226] bond2: entered promiscuous mode [ 144.517905][ T40] audit: type=1400 audit(1756139509.133:25144): avc: denied { read write } for pid=10206 comm="syz.1.1196" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 144.528004][ T40] audit: type=1400 audit(1756139509.133:25145): avc: denied { open } for pid=10206 comm="syz.1.1196" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 144.625922][T10238] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.630472][T10238] bond0: (slave lo): Error: Device can not be enslaved while up [ 144.726281][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1203'. [ 145.051592][T10197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.056351][T10243] netlink: 'syz.5.1203': attribute type 3 has an invalid length. [ 145.058977][T10243] netlink: 'syz.5.1203': attribute type 1 has an invalid length. [ 145.061671][T10243] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1203'. [ 145.064708][T10243] NCSI netlink: No device for ifindex 0 [ 145.119930][T10251] Invalid source name [ 145.121619][T10251] UBIFS error (pid: 10251): cannot open "ubifs", error -22 [ 145.125918][T10254] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1207'. [ 145.136039][T10254] bridge0: entered allmulticast mode [ 145.138579][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 145.140604][ T40] audit: type=1400 audit(1756139509.713:25146): avc: denied { create } for pid=10252 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.140682][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 145.152243][ T40] audit: type=1400 audit(1756139509.713:25147): avc: denied { ioctl } for pid=10252 comm="syz.1.1207" path="socket:[44513]" dev="sockfs" ino=44513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.224290][ T40] audit: type=1400 audit(1756139509.797:25148): avc: denied { setopt } for pid=10262 comm="syz.6.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.267267][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'. [ 145.300029][T10269] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1206'. [ 145.428628][T10281] qrtr: Invalid version 0 [ 145.472646][ T40] audit: type=1400 audit(1756139510.022:25149): avc: denied { connect } for pid=10285 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.488014][T10286] sctp: [Deprecated]: syz.1.1217 (pid 10286) Use of int in maxseg socket option. [ 145.488014][T10286] Use struct sctp_assoc_value instead [ 145.523306][T10292] binder: 10291:10292 ioctl c0306201 200000000480 returned -14 [ 145.528819][T10292] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1218'. [ 145.540325][T10292] IPv6: sit1: Disabled Multicast RS [ 145.543561][T10292] sit1: entered allmulticast mode [ 145.595338][T10298] binder: BINDER_SET_CONTEXT_MGR already set [ 145.597624][T10298] binder: 10291:10298 ioctl 4018620d 200000000140 returned -16 [ 145.605819][T10300] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1219'. [ 145.608729][T10296] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 145.612463][T10300] netlink: 'syz.1.1219': attribute type 10 has an invalid length. [ 145.616803][T10300] batman_adv: batadv0: Interface deactivated: dummy0 [ 145.621319][T10300] batman_adv: batadv0: Removing interface: dummy0 [ 145.818907][T10312] block nbd4: Attempted send on invalid socket [ 145.821927][T10312] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.825200][T10312] block nbd4: Attempted send on invalid socket [ 145.827121][T10312] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.830338][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 145.833501][T10312] block nbd4: Attempted send on invalid socket [ 145.835467][T10312] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.838078][T10313] wireguard0: entered allmulticast mode [ 145.838319][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 145.845252][T10312] block nbd4: Attempted send on invalid socket [ 145.847207][T10312] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.852063][T10312] block nbd4: Attempted send on invalid socket [ 145.854005][T10312] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.856975][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 145.860036][T10312] block nbd4: Attempted send on invalid socket [ 145.862647][T10312] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.865486][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 145.869009][T10312] block nbd4: Attempted send on invalid socket [ 145.870962][T10312] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.874401][T10314] wireguard1: entered allmulticast mode [ 145.875447][T10312] block nbd4: Attempted send on invalid socket [ 145.878642][T10312] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.881637][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 145.885007][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 145.888256][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 145.891340][T10312] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 145.894378][T10312] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 146.126913][T10334] binder: 10333:10334 ioctl c018620c 200000000240 returned -22 [ 146.142762][T10334] binder: 10333:10334 ioctl 9362 0 returned -22 [ 146.258264][T10353] netfs: Couldn't get user pages (rc=-14) [ 146.335031][T10339] cgroup: fork rejected by pids controller in /syz6 [ 146.569106][T10400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=10400 comm=syz.1.1240 [ 146.573909][T10400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=10400 comm=syz.1.1240 [ 146.739372][T10430] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 146.742839][T10430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59250 sclass=netlink_route_socket pid=10430 comm=syz.5.1251 [ 146.879228][T10448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10448 comm=syz.5.1256 [ 146.888977][ T5333] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 147.116615][T10467] sp0: Synchronizing with TNC [ 147.136822][T10461] kvm: kvm [10456]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 147.141098][T10461] kvm: kvm [10456]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 147.159428][T10474] netlink: 'syz.5.1264': attribute type 7 has an invalid length. [ 147.500551][T10496] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.547048][T10512] /dev/sg0: Can't lookup blockdev [ 147.547731][T10513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=10513 comm=syz.5.1275 [ 147.733963][T10524] overlayfs: missing 'lowerdir' [ 147.852063][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 148.205802][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 148.210266][ T1115] ata1.00: configured for UDMA/100 [ 148.280643][T10531] syz.4.1281 (10531) used greatest stack depth: 19480 bytes left [ 148.308977][T10535] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 148.329459][T10535] bond6 (unregistering): Released all slaves [ 148.536716][T10558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.598808][ T5980] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 148.753876][T10580] usb usb9: usbfs: process 10580 (syz.1.1295) did not claim interface 0 before use [ 148.846617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.132121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.190433][T10611] vlan2: entered promiscuous mode [ 149.192142][T10611] vlan2: entered allmulticast mode [ 149.193741][T10611] hsr_slave_1: entered allmulticast mode [ 149.604926][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 149.604944][ T40] audit: type=1400 audit(1756139513.894:25160): avc: denied { mount } for pid=10626 comm="syz.1.1311" name="/" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 149.619337][ T40] audit: type=1400 audit(1756139513.894:25161): avc: denied { search } for pid=10626 comm="syz.1.1311" name="/" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.628131][ T40] audit: type=1400 audit(1756139513.894:25162): avc: denied { search } for pid=10626 comm="syz.1.1311" name="/" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.637617][ T40] audit: type=1400 audit(1756139513.894:25163): avc: denied { setattr } for pid=10626 comm="syz.1.1311" name="/" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.653978][ T40] audit: type=1400 audit(1756139513.932:25164): avc: denied { mount } for pid=10630 comm="syz.5.1313" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 149.671284][ T40] audit: type=1400 audit(1756139513.960:25165): avc: denied { search } for pid=10630 comm="syz.5.1313" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.757954][ T40] audit: type=1400 audit(1756139514.034:25166): avc: denied { append } for pid=10641 comm="syz.5.1316" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.966423][ T40] audit: type=1400 audit(1756139514.240:25167): avc: denied { shutdown } for pid=10650 comm="syz.4.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.966698][T10651] __nla_validate_parse: 17 callbacks suppressed [ 149.966708][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1319'. [ 150.346208][T10683] overlay: ./file0 is not a directory [ 150.509894][T10700] overlay: Bad value for 'workdir' [ 150.562518][T10709] nbd_handle_cmd: 4 callbacks suppressed [ 150.562533][T10709] block nbd1: Attempted send on invalid socket [ 150.567971][T10709] blk_print_req_error: 4 callbacks suppressed [ 150.567981][T10709] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 150.574363][T10709] gfs2: error -5 reading superblock [ 150.765795][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1338'. [ 150.767405][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1338'. [ 150.791923][ T5980] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 150.810999][T10720] kvm: Disabled LAPIC found during irq injection [ 150.815341][T10719] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1338'. [ 150.978883][ T40] audit: type=1400 audit(1756139515.176:25168): avc: denied { setopt } for pid=10738 comm="syz.5.1342" lport=59559 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 151.064128][T10755] random: crng reseeded on system resumption [ 151.064457][ T40] audit: type=1400 audit(1756139515.260:25169): avc: denied { write } for pid=10754 comm="syz.4.1345" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.086582][T10755] Unrecognized hibernate image header format! [ 151.090796][T10755] PM: hibernation: Image mismatch: architecture specific data [ 151.162684][T10760] tipc: Enabling of bearer rejected, media not registered [ 151.271603][ T6971] syz_tun: left allmulticast mode [ 151.274433][ T6971] dvmrp8: left allmulticast mode [ 151.367080][ T6971] [U] ÊÝÔ^|ӽ㸧A‚ìÑa„Ü»RŒÛ^¿šøTidð[¾›—ò|Ãòrßš›ÅàÞ5¹GÆêì?pm92Y‡voè` [ 151.625917][ T6259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 151.630270][ T6259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.634436][ T6259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.676980][T10724] ceph: No mds server is up or the cluster is laggy [ 151.725827][ T6259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 151.730371][ T6259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.735044][ T6259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.818123][ T6259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 151.821920][ T6259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.825315][ T6259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.846193][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.853634][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.857930][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.860829][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.865318][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.921015][ T6259] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 151.924551][ T6259] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.927462][ T6259] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.938448][T10788] netlink: 'syz.5.1355': attribute type 1 has an invalid length. [ 152.001263][T10795] netlink: set zone limit has 4 unknown bytes [ 152.009573][T10795] overlayfs: failed to resolve './bus': -2 [ 152.060912][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.073972][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.076967][T10798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.087997][T10782] chnl_net:caif_netlink_parms(): no params data found [ 152.104198][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.192469][ T6259] dummy0: left allmulticast mode [ 152.195132][ T6259] bridge0: port 3(dummy0) entered disabled state [ 152.201463][ T6259] bridge_slave_1: left allmulticast mode [ 152.203389][ T6259] bridge_slave_1: left promiscuous mode [ 152.205445][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.213387][ T6259] bridge_slave_0: left allmulticast mode [ 152.214961][T10812] fuse: Unknown parameter 'grouphd' [ 152.215490][ T6259] bridge_slave_0: left promiscuous mode [ 152.219794][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.266434][T10808] /dev/sr0: Can't open blockdev [ 152.300833][ T6259] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 152.304311][ T6259] ip6gre1 (unregistering): left promiscuous mode [ 152.317886][ T6259] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 152.320927][ T6259] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0a:f3:a8:db:6e:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 152.429449][ T6259] bond5 (unregistering): (slave geneve3): Releasing active interface [ 152.441154][ T6259] bond1 (unregistering): (slave geneve2): Releasing active interface [ 152.613402][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.618749][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.624671][ T6259] bond0 (unregistering): (slave team0): Releasing backup interface [ 152.630447][ T6259] bond0 (unregistering): Released all slaves [ 152.636594][ T6259] bond1 (unregistering): Released all slaves [ 152.721073][ T6259] bond2 (unregistering): Released all slaves [ 152.731368][ T6259] bond3 (unregistering): Released all slaves [ 152.744869][ T6259] bond4 (unregistering): (slave veth5): Releasing backup interface [ 152.749772][ T6259] bond4 (unregistering): Released all slaves [ 152.837005][ T6259] bond5 (unregistering): Released all slaves [ 152.850679][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1359'. [ 152.906999][T10822] tmpfs: Bad value for 'gid' [ 152.909975][T10822] tmpfs: Bad value for 'gid' [ 152.972507][T10830] netlink: 'syz.5.1366': attribute type 63 has an invalid length. [ 152.986354][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.989022][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.993352][T10782] bridge_slave_0: entered allmulticast mode [ 152.996303][T10782] bridge_slave_0: entered promiscuous mode [ 153.004832][ T6259] tipc: Left network mode [ 153.010506][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.013103][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.015950][T10782] bridge_slave_1: entered allmulticast mode [ 153.018898][T10782] bridge_slave_1: entered promiscuous mode [ 153.123464][T10847] __vm_enough_memory: 23 callbacks suppressed [ 153.123481][T10847] __vm_enough_memory: pid: 10847, comm: syz.5.1372, bytes: 21200280215552 not enough memory for the allocation [ 153.131519][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.139253][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.199607][T10858] netlink: 'syz.6.1374': attribute type 1 has an invalid length. [ 153.258251][T10782] team0: Port device team_slave_0 added [ 153.261082][T10782] team0: Port device team_slave_1 added [ 153.349651][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.352402][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.361228][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.365776][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.368178][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.375639][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.442313][T10782] hsr_slave_0: entered promiscuous mode [ 153.445429][T10782] hsr_slave_1: entered promiscuous mode [ 153.448014][T10782] debugfs: 'hsr0' already exists in 'hsr' [ 153.450567][T10782] Cannot create hsr debugfs directory [ 153.615875][ T6259] hsr_slave_0: left promiscuous mode [ 153.618373][ T6259] hsr_slave_1: left promiscuous mode [ 153.620387][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.622966][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.626292][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.628602][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.650590][ T6259] veth1_macvtap: left promiscuous mode [ 153.652355][ T6259] veth0_macvtap: left promiscuous mode [ 153.654204][ T6259] veth1_vlan: left promiscuous mode [ 153.805775][ T6538] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 153.970621][ T6538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.974273][ T6538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.978538][ T6538] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 153.981818][ T6538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.000045][ T6538] usb 10-1: config 0 descriptor?? [ 154.086365][ T5988] Bluetooth: hci2: command tx timeout [ 154.227343][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.234481][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.616169][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 154.723005][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 154.767519][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 154.944412][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1379'. [ 154.948354][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 156.305525][ T5988] Bluetooth: hci2: command tx timeout [ 156.764712][T10876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.770414][T10782] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.781293][T10782] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.788380][T10782] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.795694][T10782] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.869696][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.879040][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.886884][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.890023][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.900963][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.903383][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.918753][ T6538] usbhid 10-1:0.0: can't add hid device: -71 [ 156.921446][ T6538] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 156.931378][ T6538] usb 10-1: USB disconnect, device number 4 [ 156.961518][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 156.961539][ T40] audit: type=1400 audit(1756139520.779:25173): avc: denied { setopt } for pid=10965 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.977215][T10968] fuse: Bad value for 'rootmode' [ 157.018733][T10978] netlink: 'syz.1.1400': attribute type 2 has an invalid length. [ 157.030234][T10978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 157.033518][T10978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 157.045727][T10782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.222436][T10782] veth0_vlan: entered promiscuous mode [ 157.233678][T10782] veth1_vlan: entered promiscuous mode [ 157.267229][T10782] veth0_macvtap: entered promiscuous mode [ 157.274664][T10782] veth1_macvtap: entered promiscuous mode [ 157.285630][T10782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.293399][T10782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.300028][ T6275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.304604][ T6275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.309329][ T6275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.313805][ T6275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.353293][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.357451][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.375768][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.379135][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.476581][ T40] audit: type=1400 audit(1756139521.256:25174): avc: denied { write } for pid=11004 comm="syz.7.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.507494][ T40] audit: type=1400 audit(1756139521.284:25175): avc: denied { ioctl } for pid=11006 comm="syz.5.1404" path="socket:[50100]" dev="sockfs" ino=50100 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.762879][ T40] audit: type=1400 audit(1756139521.518:25176): avc: denied { setopt } for pid=11021 comm="syz.7.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.845269][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1410'. [ 157.921088][T11031] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 157.923809][T11031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.927980][T11031] vhci_hcd vhci_hcd.0: Device attached [ 157.956079][T11035] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1411'. [ 158.059093][T11041] hub 9-0:1.0: USB hub found [ 158.063399][T11041] hub 9-0:1.0: 1 port detected [ 158.075184][ T40] audit: type=1400 audit(1756139521.817:25177): avc: denied { create } for pid=11040 comm="syz.1.1413" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 158.076591][T11041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1413'. [ 158.084477][ T34] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 158.172093][T11049] program syz.1.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.178953][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 158.182965][T11049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.188286][ T1476] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 158.250603][T11049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.256550][ T34] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.261529][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.267008][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.273649][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.279082][ T34] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.282876][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.288992][ T34] usb 12-1: config 0 descriptor?? [ 158.529668][ T5988] Bluetooth: hci2: command tx timeout [ 158.595292][T11069] i2c i2c-1: Invalid block write size 34 [ 158.690044][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1424'. [ 158.693445][T11077] openvswitch: netlink: Unknown nsh attribute 0 [ 158.695905][T11077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.711030][T11078] netlink: 'syz.1.1422': attribute type 10 has an invalid length. [ 158.733285][ T34] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 158.740034][T11032] vhci_hcd: connection reset by peer [ 158.745150][ T1146] vhci_hcd: stop threads [ 158.747484][ T1146] vhci_hcd: release socket [ 158.749503][ T1146] vhci_hcd: disconnect device [ 158.750509][ T34] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 158.948304][ T4299] usb 12-1: USB disconnect, device number 2 [ 159.432969][T11090] overlay: filesystem on ./bus not supported as upperdir [ 159.521512][T11096] binder: Bad value for 'max' [ 159.521794][ T40] audit: type=1400 audit(1756139523.164:25178): avc: denied { mounton } for pid=11093 comm="syz.7.1429" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.532374][ T40] audit: type=1400 audit(1756139523.173:25179): avc: denied { module_load } for pid=11093 comm="syz.7.1429" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 159.628650][ T40] audit: type=1400 audit(1756139523.267:25180): avc: denied { mounton } for pid=11106 comm="syz.5.1433" path="mnt:[4026532868]" dev="nsfs" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.744182][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1435'. [ 159.779678][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'. [ 159.785786][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'. [ 159.832173][T11123] netlink: 'syz.6.1437': attribute type 18 has an invalid length. [ 159.836249][T11123] netlink: 'syz.6.1437': attribute type 18 has an invalid length. [ 160.752770][ T5988] Bluetooth: hci2: command tx timeout [ 163.660682][ T1476] vhci_hcd: vhci_device speed not set [ 174.549167][T11175] __nla_validate_parse: 4 callbacks suppressed [ 174.549179][T11175] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1440'. [ 174.555940][T11175] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1440'. [ 174.556754][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1441'. [ 174.558858][T11175] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1440'. [ 174.575599][ T5988] Bluetooth: hci4: unexpected event for opcode 0x200b [ 174.578802][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 174.580626][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1441'. [ 174.582747][T11181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11181 comm=syz.6.1443 [ 174.640452][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.643178][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.646635][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.649635][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.653629][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.656268][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.659397][T11197] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 174.659551][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.666238][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.666546][T11197] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 174.669522][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.683076][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.687563][T11194] binder: BINDER_SET_CONTEXT_MGR already set [ 174.694320][T11194] binder: 11193:11194 ioctl 4018620d 200000000280 returned -16 [ 174.702578][T11197] overlayfs: conflicting lowerdir path [ 174.942845][T11213] FAULT_INJECTION: forcing a failure. [ 174.942845][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 174.949315][T11213] CPU: 1 UID: 0 PID: 11213 Comm: syz.6.1450 Not tainted syzkaller #0 PREEMPT(full) [ 174.949344][T11213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.949361][T11213] Call Trace: [ 174.949367][T11213] [ 174.949381][T11213] dump_stack_lvl+0x16c/0x1f0 [ 174.949418][T11213] should_fail_ex+0x512/0x640 [ 174.949442][T11213] ? fs_reclaim_acquire+0xae/0x150 [ 174.949467][T11213] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 174.949492][T11213] should_failslab+0xc2/0x120 [ 174.949511][T11213] __kmalloc_noprof+0xd2/0x510 [ 174.949532][T11213] tomoyo_realpath_from_path+0xc2/0x6e0 [ 174.949557][T11213] ? tomoyo_profile+0x47/0x60 [ 174.949579][T11213] tomoyo_path_number_perm+0x245/0x580 [ 174.949598][T11213] ? tomoyo_path_number_perm+0x237/0x580 [ 174.949619][T11213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.949639][T11213] ? find_held_lock+0x2b/0x80 [ 174.949684][T11213] ? find_held_lock+0x2b/0x80 [ 174.949719][T11213] ? hook_file_ioctl_common+0x145/0x410 [ 174.949739][T11213] ? __fget_files+0x20e/0x3c0 [ 174.949760][T11213] security_file_ioctl+0x9b/0x240 [ 174.949788][T11213] __x64_sys_ioctl+0xb7/0x210 [ 174.949813][T11213] do_syscall_64+0xcd/0x4c0 [ 174.949832][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.949870][T11213] RIP: 0033:0x7f6a5038ebe9 [ 174.949985][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.950002][T11213] RSP: 002b:00007f6a511f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.950036][T11213] RAX: ffffffffffffffda RBX: 00007f6a505b5fa0 RCX: 00007f6a5038ebe9 [ 174.950046][T11213] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 174.950054][T11213] RBP: 00007f6a511f9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.950063][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.950074][T11213] R13: 00007f6a505b6038 R14: 00007f6a505b5fa0 R15: 00007fffae222f58 [ 174.950098][T11213] [ 175.031375][T11213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.281234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.559062][T11224] netlink: 'syz.5.1453': attribute type 10 has an invalid length. [ 175.561785][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1453'. [ 175.790121][ T1146] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.887974][T11240] FAULT_INJECTION: forcing a failure. [ 175.887974][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 175.894517][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.5.1459 Not tainted syzkaller #0 PREEMPT(full) [ 175.894542][T11240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.894553][T11240] Call Trace: [ 175.894559][T11240] [ 175.894566][T11240] dump_stack_lvl+0x16c/0x1f0 [ 175.894590][T11240] should_fail_ex+0x512/0x640 [ 175.894612][T11240] ? fs_reclaim_acquire+0xae/0x150 [ 175.894638][T11240] ? tomoyo_encode2+0x100/0x3e0 [ 175.894661][T11240] should_failslab+0xc2/0x120 [ 175.894682][T11240] __kmalloc_noprof+0xd2/0x510 [ 175.894709][T11240] tomoyo_encode2+0x100/0x3e0 [ 175.894738][T11240] tomoyo_encode+0x29/0x50 [ 175.894762][T11240] tomoyo_realpath_from_path+0x18f/0x6e0 [ 175.894791][T11240] ? tomoyo_profile+0x47/0x60 [ 175.894811][T11240] tomoyo_path_number_perm+0x245/0x580 [ 175.894832][T11240] ? tomoyo_path_number_perm+0x237/0x580 [ 175.894857][T11240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.894895][T11240] ? find_held_lock+0x2b/0x80 [ 175.894940][T11240] ? find_held_lock+0x2b/0x80 [ 175.894962][T11240] ? hook_file_ioctl_common+0x145/0x410 [ 175.894987][T11240] ? __fget_files+0x20e/0x3c0 [ 175.895014][T11240] security_file_ioctl+0x9b/0x240 [ 175.895063][T11240] __x64_sys_ioctl+0xb7/0x210 [ 175.895093][T11240] do_syscall_64+0xcd/0x4c0 [ 175.895116][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.895135][T11240] RIP: 0033:0x7fcd6e78ebe9 [ 175.895150][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.895167][T11240] RSP: 002b:00007fcd6f51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.895184][T11240] RAX: ffffffffffffffda RBX: 00007fcd6e9b5fa0 RCX: 00007fcd6e78ebe9 [ 175.895196][T11240] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 175.895206][T11240] RBP: 00007fcd6f51f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.895217][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.895228][T11240] R13: 00007fcd6e9b6038 R14: 00007fcd6e9b5fa0 R15: 00007ffda62d3708 [ 175.895253][T11240] [ 175.895337][T11240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.213345][ T40] audit: type=1400 audit(1756139794.787:25181): avc: denied { write } for pid=11256 comm="syz.6.1464" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.260659][T11260] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1465'. [ 176.440948][T11273] netlink: 'syz.6.1468': attribute type 10 has an invalid length. [ 176.444942][T11273] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1468'. [ 176.446675][ T40] audit: type=1400 audit(1756139794.993:25182): avc: denied { write } for pid=11274 comm="syz.5.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.483569][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1469'. [ 176.583770][T11289] FAULT_INJECTION: forcing a failure. [ 176.583770][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 176.589854][T11289] CPU: 2 UID: 0 PID: 11289 Comm: syz.7.1473 Not tainted syzkaller #0 PREEMPT(full) [ 176.589875][T11289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.589882][T11289] Call Trace: [ 176.589890][T11289] [ 176.589902][T11289] dump_stack_lvl+0x16c/0x1f0 [ 176.589941][T11289] should_fail_ex+0x512/0x640 [ 176.589958][T11289] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 176.589978][T11289] should_failslab+0xc2/0x120 [ 176.589992][T11289] __kmalloc_cache_noprof+0x6a/0x3e0 [ 176.590009][T11289] ? rcu_is_watching+0x12/0xc0 [ 176.590029][T11289] ? vhost_task_create+0xe5/0x2e0 [ 176.590041][T11289] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 176.590057][T11289] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 176.590077][T11289] vhost_task_create+0xe5/0x2e0 [ 176.590088][T11289] ? __pfx_vhost_task_create+0x10/0x10 [ 176.590103][T11289] ? __pfx_vhost_task_fn+0x10/0x10 [ 176.590121][T11289] kvm_mmu_post_init_vm+0x1b7/0x380 [ 176.590136][T11289] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 176.590153][T11289] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 176.590171][T11289] kvm_vcpu_ioctl+0x5eb/0x1690 [ 176.590187][T11289] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.590202][T11289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.590217][T11289] ? do_vfs_ioctl+0x128/0x14f0 [ 176.590234][T11289] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.590253][T11289] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.590284][T11289] ? hook_file_ioctl_common+0x145/0x410 [ 176.590302][T11289] ? selinux_file_ioctl+0x180/0x270 [ 176.590319][T11289] ? selinux_file_ioctl+0xb4/0x270 [ 176.590336][T11289] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.590353][T11289] __x64_sys_ioctl+0x18b/0x210 [ 176.590373][T11289] do_syscall_64+0xcd/0x4c0 [ 176.590404][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.590423][T11289] RIP: 0033:0x7f1c4858ebe9 [ 176.590438][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.590450][T11289] RSP: 002b:00007f1c4948e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.590468][T11289] RAX: ffffffffffffffda RBX: 00007f1c487b5fa0 RCX: 00007f1c4858ebe9 [ 176.590475][T11289] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 176.590482][T11289] RBP: 00007f1c4948e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.590489][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.590496][T11289] R13: 00007f1c487b6038 R14: 00007f1c487b5fa0 R15: 00007fff34b94cf8 [ 176.590512][T11289] [ 176.717020][T11293] program syz.6.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.790580][T11301] overlayfs: failed to resolve './cgroup': -2 [ 176.830524][T11308] usb usb8: usbfs: process 11308 (syz.6.1480) did not claim interface 0 before use [ 177.020552][T11319] tap0: tun_chr_ioctl cmd 1074025675 [ 177.022584][T11319] tap0: persist disabled [ 177.024856][T11319] tap0: tun_chr_ioctl cmd 1074025675 [ 177.027003][T11319] tap0: persist enabled [ 177.087272][T11323] binder: 11318:11323 ioctl 40044591 0 returned -22 [ 177.504273][T11334] FAULT_INJECTION: forcing a failure. [ 177.504273][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 177.509543][T11334] CPU: 0 UID: 0 PID: 11334 Comm: syz.1.1487 Not tainted syzkaller #0 PREEMPT(full) [ 177.509567][T11334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.509579][T11334] Call Trace: [ 177.509586][T11334] [ 177.509593][T11334] dump_stack_lvl+0x16c/0x1f0 [ 177.509642][T11334] should_fail_ex+0x512/0x640 [ 177.509669][T11334] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 177.509692][T11334] should_failslab+0xc2/0x120 [ 177.509713][T11334] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 177.509732][T11334] ? copy_process+0x4b6/0x7690 [ 177.509757][T11334] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.509783][T11334] copy_process+0x4b6/0x7690 [ 177.509840][T11334] ? __pfx_copy_process+0x10/0x10 [ 177.509870][T11334] ? lockdep_init_map_type+0x5c/0x280 [ 177.509890][T11334] ? lockdep_init_map_type+0x5c/0x280 [ 177.509907][T11334] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 177.509931][T11334] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 177.509960][T11334] vhost_task_create+0x1d2/0x2e0 [ 177.509978][T11334] ? __pfx_vhost_task_create+0x10/0x10 [ 177.510006][T11334] ? __pfx_vhost_task_fn+0x10/0x10 [ 177.510036][T11334] kvm_mmu_post_init_vm+0x1b7/0x380 [ 177.510059][T11334] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 177.510091][T11334] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 177.510120][T11334] kvm_vcpu_ioctl+0x5eb/0x1690 [ 177.510147][T11334] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.510170][T11334] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.510192][T11334] ? do_vfs_ioctl+0x128/0x14f0 [ 177.510220][T11334] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.510247][T11334] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 177.510282][T11334] ? hook_file_ioctl_common+0x145/0x410 [ 177.510309][T11334] ? selinux_file_ioctl+0x180/0x270 [ 177.510332][T11334] ? selinux_file_ioctl+0xb4/0x270 [ 177.510358][T11334] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.510382][T11334] __x64_sys_ioctl+0x18b/0x210 [ 177.510410][T11334] do_syscall_64+0xcd/0x4c0 [ 177.510433][T11334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.510450][T11334] RIP: 0033:0x7f5e75b8ebe9 [ 177.510465][T11334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.510482][T11334] RSP: 002b:00007f5e769e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.510508][T11334] RAX: ffffffffffffffda RBX: 00007f5e75db5fa0 RCX: 00007f5e75b8ebe9 [ 177.510519][T11334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 177.510529][T11334] RBP: 00007f5e769e5090 R08: 0000000000000000 R09: 0000000000000000 [ 177.510539][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.510549][T11334] R13: 00007f5e75db6038 R14: 00007f5e75db5fa0 R15: 00007ffff27d82e8 [ 177.510575][T11334] [ 177.723158][T11338] ubi: mtd0 is already attached to ubi31 [ 177.948594][ T40] audit: type=1400 audit(1756139796.406:25183): avc: denied { getopt } for pid=11357 comm="syz.7.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.975274][ T6028] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 178.169248][ T6028] usb 10-1: Using ep0 maxpacket: 8 [ 178.174192][ T6028] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 178.181109][ T6028] usb 10-1: config 0 interface 0 has no altsetting 0 [ 178.187332][ T6028] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.00 [ 178.194626][ T6028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.205603][ T6028] usb 10-1: config 0 descriptor?? [ 178.439035][ T6028] hid-generic 0003:0DFC:0102.000A: hidraw1: USB HID vff.ff Device [HID 0dfc:0102] on usb-dummy_hcd.5-1/input0 [ 178.451541][ T6059] usb 10-1: USB disconnect, device number 5 [ 178.489906][T11392] fido_id[11392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 178.646827][ T40] audit: type=1400 audit(1756139797.061:25184): avc: denied { read } for pid=11399 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.706085][ T40] audit: type=1400 audit(1756139797.117:25185): avc: denied { ioctl } for pid=11399 comm="syz.5.1502" path="socket:[54860]" dev="sockfs" ino=54860 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.854249][T11403] tmpfs: Bad value for 'mpol' [ 178.964043][ T40] audit: type=1400 audit(1756139797.360:25186): avc: denied { read } for pid=11405 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.004739][T11410] netlink: 'syz.6.1505': attribute type 30 has an invalid length. [ 179.112820][ T40] audit: type=1400 audit(1756139797.500:25187): avc: denied { mount } for pid=11421 comm="syz.7.1508" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.121176][ T40] audit: type=1400 audit(1756139797.500:25188): avc: denied { remount } for pid=11421 comm="syz.7.1508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.131562][ T40] audit: type=1400 audit(1756139797.510:25189): avc: denied { unmount } for pid=10782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.153921][T11424] Invalid source name [ 179.155946][T11424] UBIFS error (pid: 11424): cannot open "ubifs", error -22 [ 179.175242][T11428] Invalid source name [ 179.179402][T11428] UBIFS error (pid: 11428): cannot open "/dev/sg0", error -22 [ 179.182194][T11427] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 179.401673][ T40] audit: type=1400 audit(1756139797.762:25190): avc: denied { execute_no_trans } for pid=11457 comm="syz.1.1516" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="hugetlbfs" ino=53012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 179.564421][T11475] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 179.564467][T11476] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 179.572640][T11475] syz_tun: entered promiscuous mode [ 179.585839][T11475] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 179.975449][T11540] __nla_validate_parse: 3 callbacks suppressed [ 179.975461][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 180.073913][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1541'. [ 180.076670][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1541'. [ 180.085469][T11551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11551 comm=syz.7.1541 [ 180.125433][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1543'. [ 180.133355][T11561] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1543'. [ 180.302499][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.304463][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.307046][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.309099][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.310987][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.314498][ T56] hid-generic 0000:0004:0009.000B: unknown main item tag 0x0 [ 180.317262][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.317362][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.318620][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.323725][T11577] ksmbd: Unknown IPC event: 1, ignore. [ 180.326134][ T56] hid-generic 0000:0004:0009.000B: unknown main item tag 0x0 [ 180.329531][ T56] hid-generic 0000:0004:0009.000B: unknown main item tag 0x2 [ 180.344917][ T56] hid-generic 0000:0004:0009.000B: hidraw1: HID v0.04 Device [syz0] on syz1 [ 180.370851][T11582] fido_id[11582]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.591608][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1552'. [ 180.702579][T11634] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 180.851194][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 180.947930][T11644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.106499][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'. [ 181.154238][T11685] cgroup: Unknown subsys name 'cpuset' [ 181.168371][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 181.171345][T11685] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.219995][T11694] JFS: charset not found [ 181.248212][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 181.306034][T11705] loop0: detected capacity change from 0 to 7 [ 181.314013][T11393] Dev loop0: unable to read RDB block 7 [ 181.315854][T11393] loop0: AHDI p1 p2 p3 [ 181.317110][T11393] loop0: partition table partially beyond EOD, truncated [ 181.320143][T11393] loop0: p1 start 1601398130 is beyond EOD, truncated [ 181.323249][T11393] loop0: p2 start 1702059890 is beyond EOD, truncated [ 181.330564][T11705] Dev loop0: unable to read RDB block 7 [ 181.332769][T11705] loop0: AHDI p1 p2 p3 [ 181.334430][T11705] loop0: partition table partially beyond EOD, truncated [ 181.337220][T11705] loop0: p1 start 1601398130 is beyond EOD, truncated [ 181.339540][T11705] loop0: p2 start 1702059890 is beyond EOD, truncated [ 181.364786][ T5980] Bluetooth: hci0: command tx timeout [ 181.524321][T11724] netlink: 'syz.7.1577': attribute type 6 has an invalid length. [ 181.524888][T11726] netlink: 'syz.7.1577': attribute type 6 has an invalid length. [ 181.530654][T11724] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1577'. [ 181.612964][T11734] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.616473][T11734] qnx4: unable to read the superblock [ 181.710049][T11748] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 181.713151][T11748] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 181.761204][T11764] xt_time: unknown flags 0xf4 [ 181.831896][T11767] netlink: 'syz.7.1585': attribute type 1 has an invalid length. [ 181.835537][T11767] NCSI netlink: No device for ifindex 0 [ 181.880941][T11776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.918584][T11770] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 182.535580][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 182.535592][ T40] audit: type=1400 audit(1756139800.699:25194): avc: denied { mount } for pid=11814 comm="syz.7.1593" name="/" dev="hugetlbfs" ino=55517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 182.536293][T11815] overlayfs: maximum fs stacking depth exceeded [ 182.537586][ T40] audit: type=1400 audit(1756139800.699:25195): avc: denied { mounton } for pid=11814 comm="syz.7.1593" path="/53/file0" dev="hugetlbfs" ino=55517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 182.558009][T11815] bond0: option mode: unable to set because the bond device has slaves [ 182.578497][ T40] audit: type=1400 audit(1756139800.737:25196): avc: denied { unmount } for pid=10782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 182.731757][T11828] NILFS (nbd7): device size too small [ 182.737948][ T40] audit: type=1800 audit(1756139800.886:25197): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.1596" name="/newroot/55/file0" dev="tmpfs" ino=299 res=0 errno=0 [ 182.963016][T11849] : entered promiscuous mode [ 182.967233][T11849] : left promiscuous mode [ 183.010586][ T56] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 183.145646][T11865] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.173454][ T56] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 183.176706][ T56] usb 12-1: can't read configurations, error -61 [ 183.309885][ T56] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 183.342209][ T5980] Bluetooth: hci2: command 0x0406 tx timeout [ 183.433268][T11884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11884 comm=syz.5.1606 [ 183.477147][ T56] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 183.480329][ T56] usb 12-1: can't read configurations, error -61 [ 183.485038][ T56] usb usb12-port1: attempt power cycle [ 183.844743][ T56] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 183.868622][ T56] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 183.872040][ T56] usb 12-1: can't read configurations, error -61 [ 184.004868][ T56] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 184.030078][ T56] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 184.033327][ T56] usb 12-1: can't read configurations, error -61 [ 184.036230][ T56] usb usb12-port1: unable to enumerate USB device [ 184.127989][T11915] overlayfs: upper fs does not support file handles, falling back to index=off. [ 184.195987][ T40] audit: type=1400 audit(1756139802.243:25198): avc: denied { mount } for pid=11918 comm="syz.1.1616" name="/" dev="rpc_pipefs" ino=57434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 184.508185][ T6538] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 184.667650][ T6538] usb 6-1: Using ep0 maxpacket: 16 [ 184.672448][ T6538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.677048][ T6538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.681579][ T6538] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 184.686953][ T6538] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 184.691029][ T6538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.697476][ T6538] usb 6-1: config 0 descriptor?? [ 185.133171][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.137308][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.141869][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.144960][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.150128][T11927] random: crng reseeded on system resumption [ 185.150191][ T40] audit: type=1400 audit(1756139803.150:25199): avc: denied { read } for pid=11925 comm="syz.1.1618" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.718336][ T6538] usbhid 6-1:0.0: can't add hid device: -71 [ 185.720583][ T6538] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 185.725264][ T6538] usb 6-1: USB disconnect, device number 11 [ 185.825522][T11970] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 185.829727][ T40] audit: type=1400 audit(1756139803.777:25200): avc: denied { read write } for pid=11969 comm="syz.5.1626" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.831665][T11970] __nla_validate_parse: 10 callbacks suppressed [ 185.831682][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1626'. [ 185.839539][ T40] audit: type=1400 audit(1756139803.777:25201): avc: denied { open } for pid=11969 comm="syz.5.1626" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.873703][T11985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11985 comm=syz.1.1628 [ 185.883566][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 185.909358][T12003] netlink: 'syz.7.1630': attribute type 2 has an invalid length. [ 185.911869][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1630'. [ 185.976089][T12011] input: syz0 as /devices/virtual/input/input14 [ 185.989892][T12016] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1632'. [ 186.120019][ T40] audit: type=1400 audit(1756139804.048:25202): avc: denied { ioctl } for pid=12014 comm="syz.1.1632" path="socket:[55916]" dev="sockfs" ino=55916 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 186.335072][T12060] unsupported nla_type 4111 [ 186.342544][T12060] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 186.345497][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 186.349916][T12060] kAFS: unable to lookup cell 'syP"™z0' [ 186.406579][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1643'. [ 186.421505][T12118] netlink: 'syz.5.1643': attribute type 4 has an invalid length. [ 186.427813][T12118] netlink: 'syz.5.1643': attribute type 4 has an invalid length. [ 186.643063][ T40] audit: type=1400 audit(1756139804.534:25203): avc: denied { listen } for pid=12171 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.979401][T12199] input: syz1 as /devices/virtual/input/input15 [ 186.988785][T12199] netlink: 'syz.6.1656': attribute type 1 has an invalid length. [ 187.014754][T12199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.023707][T12200] vlan0: entered promiscuous mode [ 187.025426][T12200] bond1: entered promiscuous mode [ 187.027156][T12200] vlan0: entered allmulticast mode [ 187.029111][T12200] bond1: entered allmulticast mode [ 187.043219][T12199] bond1: (slave gretap1): making interface the new active one [ 187.046468][T12199] gretap1: entered promiscuous mode [ 187.048674][T12199] gretap1: entered allmulticast mode [ 187.052957][T12199] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.079062][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 187.183483][T12256] netlink: 'syz.6.1661': attribute type 20 has an invalid length. [ 187.233154][T12259] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 187.446676][T12269] netdevsim netdevsim6: Direct firmware load for úÿÿû failed with error -2 [ 187.452246][T12269] netdevsim netdevsim6: Falling back to sysfs fallback for: úÿÿû [ 187.493273][T12274] comedi comedi3: comedi_config --init_data is deprecated [ 187.508620][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'. [ 187.537953][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 187.540037][T12288] usb 8-1: USB disconnect, device number 13 [ 187.836961][T12317] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.840211][T12317] block device autoloading is deprecated and will be removed. [ 187.875181][ T833] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 188.038224][ T833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.042042][ T833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.046899][ T833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.049638][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.239365][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 188.239382][ T40] audit: type=1400 audit(1756139806.040:25205): avc: denied { read } for pid=12336 comm="syz.5.1678" laddr=fe80::3058:38ff:fe66:3541 lport=8 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.270953][ T833] usb 6-1: usb_control_msg returned -71 [ 188.274263][ T833] usbtmc 6-1:16.0: can't read capabilities [ 188.288701][ T833] usb 6-1: USB disconnect, device number 12 [ 188.306321][ T5988] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 188.306383][ T5988] Bluetooth: hci2: Malformed LE Event: 0x0d [ 188.338266][T12360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12360 comm=syz.7.1682 [ 188.342556][T12360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12360 comm=syz.7.1682 [ 188.348090][ T40] audit: type=1400 audit(1756139806.134:25206): avc: denied { audit_write } for pid=12359 comm="syz.7.1682" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 188.446369][ T40] audit: type=1400 audit(1756139806.227:25207): avc: denied { ioctl } for pid=12373 comm="syz.5.1684" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 188.579567][T12384] ip6erspan0: entered promiscuous mode [ 188.644535][ T6041] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 188.805268][ T6041] usb 11-1: Using ep0 maxpacket: 8 [ 188.808691][ T6041] usb 11-1: config 16 has an invalid descriptor of length 56, skipping remainder of the config [ 188.813210][ T6041] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.817198][ T6041] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.821199][ T6041] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.825787][ T6041] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.829605][ T6041] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.839025][ T6041] usbtmc 11-1:16.0: bulk endpoints not found [ 188.874665][T12414] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1696'. [ 188.948189][T12422] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 189.101814][T12430] netlink: 'syz.1.1699': attribute type 7 has an invalid length. [ 189.168381][ T6041] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 189.307314][ T6041] usb 10-1: device descriptor read/64, error -71 [ 189.347907][ T40] audit: type=1400 audit(1756139807.069:25208): avc: denied { shutdown } for pid=12447 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.348714][T12448] SELinux: failed to load policy [ 189.576973][ T6041] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 189.681757][ T6028] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 189.724249][ T6041] usb 10-1: device descriptor read/64, error -71 [ 189.845151][ T6028] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.849316][ T6028] usb 6-1: not running at top speed; connect to a high speed hub [ 189.852864][ T6041] usb usb10-port1: attempt power cycle [ 189.856370][ T6028] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.862158][ T6028] usb 6-1: config 1 interface 0 has no altsetting 0 [ 189.867767][ T6028] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.872130][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.876078][ T6028] usb 6-1: Product: syz [ 189.877919][ T6028] usb 6-1: Manufacturer: syz [ 189.879904][ T6028] usb 6-1: SerialNumber: syz [ 190.111725][ T6028] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 190.117026][ T6028] usb 6-1: USB disconnect, device number 13 [ 190.227013][ T6041] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 190.229820][T12475] binder: 12474:12475 unknown command 0 [ 190.232921][T12475] binder: 12474:12475 ioctl c0306201 200000000080 returned -22 [ 190.237590][ T40] audit: type=1400 audit(1756139807.892:25209): avc: denied { map } for pid=12474 comm="syz.7.1708" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.248756][ T40] audit: type=1400 audit(1756139807.902:25210): avc: denied { call } for pid=12474 comm="syz.7.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.250408][ T6041] usb 10-1: device descriptor read/8, error -71 [ 190.257389][ T40] audit: type=1400 audit(1756139807.902:25211): avc: denied { transfer } for pid=12474 comm="syz.7.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.272312][ T40] audit: type=1400 audit(1756139807.902:25212): avc: denied { write } for pid=12474 comm="syz.7.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.362144][ T5988] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 190.475736][ T5988] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 190.475864][T12481] usb usb8: usbfs: process 12481 (syz.7.1711) did not claim interface 0 before use [ 190.526060][ T6041] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 190.548109][ T6041] usb 10-1: device descriptor read/8, error -71 [ 190.665665][ T6041] usb usb10-port1: unable to enumerate USB device [ 190.769635][T12504] Bluetooth: MGMT ver 1.23 [ 190.776112][ T40] audit: type=1400 audit(1756139808.407:25213): avc: denied { connect } for pid=12503 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.808014][T12501] cdrom: dropping to single frame dma [ 191.135412][ T1458] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 191.156397][ T40] audit: type=1400 audit(1756139808.753:25214): avc: denied { getopt } for pid=12522 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.195464][T12531] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 191.195464][T12530] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 191.204992][T12530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12530 comm=syz.1.1720 [ 191.274579][ T1458] usb 12-1: device descriptor read/64, error -71 [ 191.300143][T12533] __nla_validate_parse: 5 callbacks suppressed [ 191.300155][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 191.374943][T12539] fuse: Bad value for 'fd' [ 191.378038][T12537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12537 comm=syz.1.1722 [ 191.531310][ T1458] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 191.601244][ T6041] usb 11-1: USB disconnect, device number 3 [ 191.670297][ T1458] usb 12-1: device descriptor read/64, error -71 [ 191.729766][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 191.741271][T12572] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 191.751823][T12569] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 191.788257][ T1458] usb usb12-port1: attempt power cycle [ 191.901192][T12592] : entered promiscuous mode [ 191.906049][T12592] : left promiscuous mode [ 192.151123][ T1458] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 192.173946][ T1458] usb 12-1: device descriptor read/8, error -71 [ 192.246065][T12625] I/O error, dev loop1, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 192.251929][T12625] gfs2: error -5 reading superblock [ 192.299378][T12636] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1740'. [ 192.303968][T12636] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1740'. [ 192.306922][T12636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1740'. [ 192.429279][ T1458] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 192.452910][ T1458] usb 12-1: device descriptor read/8, error -71 [ 192.537465][T12666] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1745'. [ 192.568231][ T1458] usb usb12-port1: unable to enumerate USB device [ 192.794742][T12688] overlayfs: missing 'lowerdir' [ 192.846279][ T1458] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 192.857080][T12689] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1750'. [ 193.009427][ T1458] usb 11-1: config 0 has no interfaces? [ 193.012793][ T1458] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.016676][ T1458] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.020353][ T1458] usb 11-1: Manufacturer: syz [ 193.025252][ T1458] usb 11-1: config 0 descriptor?? [ 193.277905][T12672] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.303196][ T6041] usb 11-1: USB disconnect, device number 4 [ 193.774052][T12733] ALSA: seq fatal error: cannot create timer (-19) [ 193.906189][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 193.906200][ T40] audit: type=1400 audit(1756139811.335:25219): avc: denied { remount } for pid=12759 comm="syz.6.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.940272][T12764] misc userio: No port type given on /dev/userio [ 193.966676][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1763'. [ 194.008010][ T40] audit: type=1400 audit(1756139811.428:25220): avc: denied { setattr } for pid=12748 comm="syz.5.1761" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 194.074698][T12785] overlayfs: empty lowerdir [ 194.124281][T12795] Bluetooth: MGMT ver 1.23 [ 194.209996][T12810] 9pnet_fd: Insufficient options for proto=fd [ 194.290573][ T5988] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 194.340265][T12828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1780'. [ 194.457715][ T40] audit: type=1400 audit(1756139811.849:25221): avc: denied { kexec_image_load } for pid=12831 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 194.599183][ T56] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 194.612612][T12838] random: crng reseeded on system resumption [ 194.666973][ T40] audit: type=1400 audit(1756139812.046:25222): avc: denied { mount } for pid=12837 comm="syz.1.1782" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 194.771859][ T56] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.777185][ T56] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.783937][ T56] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 194.787561][ T56] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.791808][ T56] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.795080][ T56] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.800555][ T56] usb 12-1: config 0 descriptor?? [ 194.895091][T12845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.257112][T12859] fuse: Unknown parameter '000000000000000000040x0000000000000003' [ 195.299626][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 195.373894][ T40] audit: type=1400 audit(1756139812.710:25223): avc: denied { getopt } for pid=12862 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.456469][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.460159][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.470345][ T56] usbhid 12-1:0.0: can't add hid device: -71 [ 195.472983][ T56] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 195.478108][ T56] usb 12-1: USB disconnect, device number 11 [ 195.578347][T12894] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1792' sets config #1 [ 195.617447][T12900] 9pnet_fd: Insufficient options for proto=fd [ 195.651699][T12906] binder: 12904:12906 ioctl 80e85411 200000000140 returned -22 [ 196.262291][T12956] block nbd6: Attempted send on invalid socket [ 196.265201][T12956] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.279187][T12956] vxfs: unable to read disk superblock at 1 [ 196.283035][T12956] block nbd6: Attempted send on invalid socket [ 196.285774][T12956] I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.290268][T12956] vxfs: unable to read disk superblock at 8 [ 196.292785][T12956] vxfs: can't find superblock. [ 196.337406][T12963] chnl_net:caif_netlink_parms(): no params data found [ 196.388577][ T40] audit: type=1400 audit(1756139813.655:25224): avc: denied { mount } for pid=12971 comm="syz.1.1809" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.398133][ T40] audit: type=1400 audit(1756139813.655:25225): avc: denied { mounton } for pid=12971 comm="syz.1.1809" path="/501/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 196.410409][ T40] audit: type=1400 audit(1756139813.673:25226): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.433354][T12976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12976 comm=syz.1.1810 [ 196.686170][ T40] audit: type=1400 audit(1756139813.935:25227): avc: denied { setopt } for pid=13062 comm="syz.6.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.795035][T13084] loop2: detected capacity change from 0 to 7 [ 196.800944][T11393] Dev loop2: unable to read RDB block 7 [ 196.803332][T11393] loop2: AHDI p1 p2 p3 [ 196.804673][T11393] loop2: partition table partially beyond EOD, truncated [ 196.807984][T11393] loop2: p3 start 335544320 is beyond EOD, truncated [ 196.814155][T13084] Dev loop2: unable to read RDB block 7 [ 196.815970][T13084] loop2: AHDI p1 p2 p3 [ 196.817615][T13084] loop2: partition table partially beyond EOD, truncated [ 196.822958][T13084] loop2: p3 start 335544320 is beyond EOD, truncated [ 196.909393][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 197.039913][T13103] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.047376][ T53] usb 6-1: device descriptor read/64, error -71 [ 197.053209][T13101] overlayfs: failed lookup in lower (/, name='cpuacct.usage_sys', err=-66): unsupported object type [ 197.064565][T13103] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 197.076770][T13104] overlayfs: failed lookup in lower (/, name='file1', err=-66): unsupported object type [ 197.085988][T13101] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 197.303942][ T53] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 197.442966][ T53] usb 6-1: device descriptor read/64, error -71 [ 197.497735][ T40] audit: type=1400 audit(1756139814.693:25228): avc: denied { map } for pid=13111 comm="syz.5.1822" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 197.560968][ T53] usb usb6-port1: attempt power cycle [ 197.926334][ T53] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 197.947746][ T53] usb 6-1: device descriptor read/8, error -71 [ 198.212854][ T53] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 198.235519][ T53] usb 6-1: device descriptor read/8, error -71 [ 198.362803][ T53] usb usb6-port1: unable to enumerate USB device [ 200.525988][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.528657][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.088990][T13124] __nla_validate_parse: 4 callbacks suppressed [ 211.089003][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1823'. [ 211.117443][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1828'. [ 211.134116][T13124] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 211.175693][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 211.211407][T13140] hub 9-0:1.0: USB hub found [ 211.215984][T13140] hub 9-0:1.0: 1 port detected [ 211.230167][T13124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13124 comm=syz.7.1823 [ 211.237681][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1823'. [ 211.278513][T13144] block nbd6: Attempted send on invalid socket [ 211.280489][T13144] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.283779][T13144] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32 [ 211.307984][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 211.307995][ T40] audit: type=1400 audit(1756139827.601:25230): avc: denied { map } for pid=13143 comm="syz.6.1829" path="socket:[61047]" dev="sockfs" ino=61047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 211.318597][ T40] audit: type=1400 audit(1756139827.601:25231): avc: denied { map } for pid=13143 comm="syz.6.1829" path="socket:[61047]" dev="sockfs" ino=61047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 211.631579][T13183] tmpfs: Bad value for 'mpol' [ 211.688806][T13190] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1839'. [ 211.705007][T13205] netlink: 'syz.7.1842': attribute type 3 has an invalid length. [ 211.707246][T13205] netlink: 'syz.7.1842': attribute type 1 has an invalid length. [ 211.709613][T13205] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1842'. [ 211.750899][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1843'. [ 211.832598][T13190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.863408][T13208] team0 (unregistering): Port device team_slave_0 removed [ 211.865712][T13217] nbd: couldn't find device at index -1605786504 [ 211.872583][T13208] team0 (unregistering): Port device team_slave_1 removed [ 211.885769][ T40] audit: type=1400 audit(1756139828.144:25232): avc: denied { ioctl } for pid=13218 comm="syz.5.1846" path="socket:[62677]" dev="sockfs" ino=62677 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.906296][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1847'. [ 211.945775][ T40] audit: type=1400 audit(1756139828.209:25233): avc: denied { mounton } for pid=13255 comm="syz.6.1849" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 211.954592][T13257] fuse: Bad value for 'fd' [ 211.960221][T13261] netlink: 'syz.5.1848': attribute type 1 has an invalid length. [ 211.979017][T13261] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 212.063527][T13283] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 212.066542][T13282] netlink: 'syz.6.1853': attribute type 1 has an invalid length. [ 212.073224][T13282] netlink: 'syz.6.1853': attribute type 4 has an invalid length. [ 212.075738][T13282] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1853'. [ 212.112973][T13288] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1855'. [ 212.116055][T13288] netlink: 'syz.7.1855': attribute type 7 has an invalid length. [ 212.120171][T13289] netlink: 'syz.7.1855': attribute type 7 has an invalid length. [ 212.245851][ T40] audit: type=1400 audit(1756139828.490:25234): avc: denied { read write } for pid=13311 comm="syz.6.1862" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 212.257257][ T40] audit: type=1400 audit(1756139828.490:25235): avc: denied { open } for pid=13311 comm="syz.6.1862" path="/236/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 212.275978][T13327] netlink: 'syz.7.1866': attribute type 7 has an invalid length. [ 212.279435][T13327] netlink: 'syz.7.1866': attribute type 8 has an invalid length. [ 212.296276][T13332] netlink: 'syz.6.1867': attribute type 5 has an invalid length. [ 212.301437][T13332] loop2: detected capacity change from 0 to 7 [ 212.309195][T13136] Dev loop2: unable to read RDB block 7 [ 212.311746][T13136] loop2: AHDI p1 p2 p3 [ 212.313878][T13136] loop2: partition table partially beyond EOD, truncated [ 212.317746][T13136] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.320859][T13136] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.331421][T13332] Dev loop2: unable to read RDB block 7 [ 212.333724][T13332] loop2: AHDI p1 p2 p3 [ 212.335902][T13332] loop2: partition table partially beyond EOD, truncated [ 212.338545][T13332] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.341929][T13332] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.386781][ T40] audit: type=1400 audit(1756139828.612:25236): avc: denied { connect } for pid=13350 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.420304][ T40] audit: type=1400 audit(1756139828.649:25237): avc: denied { override_creds } for pid=13355 comm="syz.6.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.597856][T13390] bridge_slave_1: left allmulticast mode [ 212.600005][T13390] bridge_slave_1: left promiscuous mode [ 212.605045][T13390] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.611511][T13390] bridge_slave_0: left allmulticast mode [ 212.617570][T13390] bridge_slave_0: left promiscuous mode [ 212.620310][T13390] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.654849][T13401] FAT-fs (nullb0): bogus number of reserved sectors [ 212.657128][T13401] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 212.815677][ T40] audit: type=1400 audit(1756139829.014:25238): avc: denied { accept } for pid=13414 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.827513][T13427] 9pnet_virtio: no channels available for device syz [ 212.869158][T13436] tmpfs: Unknown parameter 'obj_role' [ 213.027162][T13458] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 213.034240][T13458] program syz.5.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.078266][T13460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.090009][T13460] hsr_slave_0: left promiscuous mode [ 213.093146][T13460] hsr_slave_1: left promiscuous mode [ 213.126693][T13465] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 213.132636][ T6257] Bluetooth: hci5: Frame reassembly failed (-84) [ 213.147387][ T9] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 213.179537][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 213.349931][ T9] usb 12-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.353513][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.356146][ T9] usb 12-1: Product: syz [ 213.357521][ T9] usb 12-1: Manufacturer: syz [ 213.359416][ T9] usb 12-1: SerialNumber: syz [ 213.375895][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 213.379134][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.381755][ T10] usb 6-1: Product: syz [ 213.383253][ T10] usb 6-1: Manufacturer: syz [ 213.384848][ T10] usb 6-1: SerialNumber: syz [ 213.394403][ T10] usb 6-1: config 0 descriptor?? [ 213.581300][ T9] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 213.585286][ T9] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 213.588753][ T9] lan78xx 12-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 213.594066][ T9] lan78xx 12-1:1.0: probe with driver lan78xx failed with error -71 [ 213.599680][ T9] usb 12-1: USB disconnect, device number 12 [ 213.620074][ T40] audit: type=1400 audit(1756139829.771:25239): avc: denied { read } for pid=13445 comm="syz.1.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.624738][ T53] usb 6-1: USB disconnect, device number 18 [ 214.208323][T13515] tmpfs: Cannot change global quota limit on remount [ 214.328925][T13530] openvswitch: netlink: IP tunnel dst address not specified [ 214.399937][T13539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.449108][T13547] openvswitch: netlink: EtherType 0 is less than min 600 [ 214.522080][T13555] syzkaller1: entered promiscuous mode [ 214.524149][T13555] syzkaller1: entered allmulticast mode [ 214.696466][ T53] hid (null): unknown global tag 0xe [ 214.701764][ T53] hid-generic 0007:0004:0076.000C: unknown main item tag 0x4 [ 214.704110][ T53] hid-generic 0007:0004:0076.000C: unknown main item tag 0x7 [ 214.706705][ T53] hid-generic 0007:0004:0076.000C: reserved main item tag 0xe [ 214.709117][ T53] hid-generic 0007:0004:0076.000C: unknown main item tag 0x3 [ 214.711498][ T53] hid-generic 0007:0004:0076.000C: reserved main item tag 0xe [ 214.713868][ T53] hid-generic 0007:0004:0076.000C: unknown main item tag 0x2 [ 214.716200][ T53] hid-generic 0007:0004:0076.000C: unknown global tag 0xe [ 214.718513][ T53] hid-generic 0007:0004:0076.000C: item 0 2 1 14 parsing failed [ 214.721369][ T53] hid-generic 0007:0004:0076.000C: probe with driver hid-generic failed with error -22 [ 214.747658][T13574] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.751693][T13574] qnx4: unable to read the superblock [ 214.843759][T13583] IPVS: length: 184 != 49176 [ 214.977329][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.979715][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 214.982009][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 214.984298][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 214.988669][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.994099][T13628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.317627][ T5333] Bluetooth: hci5: command 0x1003 tx timeout [ 215.317669][ T5988] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.503106][T13674] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 215.618064][T13681] kvm: user requested TSC rate below hardware speed [ 215.657852][T13688] team0: Device ipvlan1 failed to register rx_handler [ 215.915831][T13718] sp0: Synchronizing with TNC [ 216.154687][T13749] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073405497344) [ 216.159246][T13749] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 216.243361][T13756] erspan0: entered promiscuous mode [ 216.442635][T13771] __nla_validate_parse: 46 callbacks suppressed [ 216.442651][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1948'. [ 216.448916][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1948'. [ 216.703304][T13784] TCP: TCP_TX_DELAY enabled [ 216.934421][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 216.953636][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 217.126614][T13801] 9pnet: Could not find request transport: virti[º›8o [ 217.171910][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 217.171926][ T40] audit: type=1400 audit(1756139833.092:25247): avc: denied { setopt } for pid=13803 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.221073][T13806] overlayfs: failed to resolve './file1': -2 [ 217.287402][ T40] audit: type=1400 audit(1756139833.204:25248): avc: denied { setopt } for pid=13815 comm="syz.5.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.409970][T13822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.509208][ T53] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 217.692249][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.695723][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.698741][ T53] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 217.702482][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.706969][ T53] usb 6-1: config 0 descriptor?? [ 217.935881][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 217.938394][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 217.942409][ T53] usb 6-1: USB disconnect, device number 19 [ 218.505016][T13838] /dev/sg0: Can't lookup blockdev [ 218.507273][T13838] program syz.1.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.780990][ T40] audit: type=1400 audit(1756139834.598:25249): avc: denied { map } for pid=13846 comm="syz.5.1966" path="socket:[63097]" dev="sockfs" ino=63097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.855512][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1968'. [ 218.863662][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1968'. [ 218.954077][T13863] /dev/sr0: Can't open blockdev [ 218.956421][T13864] /dev/sr0: Can't open blockdev [ 219.000597][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1971'. [ 219.004073][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1971'. [ 219.007849][T13872] validate_nla: 4 callbacks suppressed [ 219.007862][T13872] netlink: 'syz.6.1971': attribute type 18 has an invalid length. [ 219.041693][T13883] ip6gre1: entered allmulticast mode [ 219.086315][T13891] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1975'. [ 219.140490][ T40] audit: type=1400 audit(1756139834.935:25250): avc: denied { getopt } for pid=13897 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.140937][T13898] /dev/sg0: Can't lookup blockdev [ 219.195709][ T40] audit: type=1400 audit(1756139834.982:25251): avc: denied { module_load } for pid=13904 comm="syz.6.1980" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 219.196854][T13907] kernel read not supported for file /policy (pid: 13907 comm: syz.6.1980) [ 219.497619][ T1476] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 219.584046][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 219.586266][ T1115] ata1: failed to read log page 10h (errno=-5) [ 219.588424][ T1115] ata1.00: exception Emask 0x1 SAct 0x1 SErr 0x0 action 0x0 [ 219.590834][ T1115] ata1.00: irq_stat 0x40000000 [ 219.592730][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 219.595428][ T1115] ata1.00: cmd 61/00:00:26:c5:04/01:00:00:00:00/40 tag 0 ncq dma 131072 out [ 219.595428][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 219.601630][ T1115] ata1.00: status: { DRDY } [ 219.604114][ T1115] ata1.00: configured for UDMA/100 [ 219.606101][ T1115] ata1: EH complete [ 219.658007][ T1476] usb 11-1: Using ep0 maxpacket: 8 [ 219.663014][ T1476] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.667373][ T1476] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.671352][ T1476] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.676443][ T1476] usb 11-1: config 0 descriptor?? [ 219.850965][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 219.853160][ T1115] ata1: failed to read log page 10h (errno=-5) [ 219.855462][ T1115] ata1.00: exception Emask 0x1 SAct 0x100000 SErr 0x0 action 0x0 [ 219.858095][ T1115] ata1.00: irq_stat 0x40000000 [ 219.859677][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 219.861802][ T1115] ata1.00: cmd 61/00:a0:26:c8:04/01:00:00:00:00/40 tag 20 ncq dma 131072 out [ 219.861802][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 219.867775][ T1115] ata1.00: status: { DRDY } [ 219.870490][ T1115] ata1.00: configured for UDMA/100 [ 219.874092][ T1115] ata1: EH complete [ 219.928596][ T40] audit: type=1326 audit(1756139835.674:25252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.1987" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e75b8ebe9 code=0x0 [ 220.219950][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 220.236311][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 220.238804][ T1115] ata1: failed to read log page 10h (errno=-5) [ 220.241194][ T1115] ata1.00: NCQ disabled due to excessive errors [ 220.243140][ T1115] ata1.00: exception Emask 0x1 SAct 0x20000000 SErr 0x0 action 0x0 [ 220.245482][ T1115] ata1.00: irq_stat 0x40000000 [ 220.247255][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 220.249549][ T1115] ata1.00: cmd 61/00:e8:26:ca:04/01:00:00:00:00/40 tag 29 ncq dma 131072 out [ 220.249549][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 220.256225][ T1115] ata1.00: status: { DRDY } [ 220.258253][ T1115] ata1.00: error: { ABRT } [ 220.260292][ T1115] ata1.00: configured for UDMA/100 [ 220.262118][ T1115] ata1: EH complete [ 220.274447][T13956] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 220.295587][ T1476] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 220.302124][ T1476] usb 11-1: USB disconnect, device number 5 [ 220.419385][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.651347][T14000] Malformed UNC in devname [ 220.651347][T14000] [ 220.654725][T14000] CIFS: VFS: Malformed UNC in devname [ 220.660015][T13991] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 220.733220][T14017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.744702][T14017] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 220.844927][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.962583][ T6257] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 221.042839][T14148] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 221.047310][T14148] overlayfs: overlapping lowerdir path [ 221.125694][T14156] ref_ctr increment failed for inode: 0x5eb offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888036a68ac0 [ 221.180979][T14171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.228400][ T40] audit: type=1400 audit(1756139836.890:25253): avc: denied { view } for pid=14182 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 221.232344][T14183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14183 comm=syz.1.2027 [ 221.258578][T14183] vlan4: entered allmulticast mode [ 221.260331][T14183] bond7: entered allmulticast mode [ 221.665437][ T40] audit: type=1400 audit(1756139837.292:25254): avc: denied { accept } for pid=14268 comm="syz.5.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.806760][ T56] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 221.825303][T14301] __nla_validate_parse: 4 callbacks suppressed [ 221.825320][T14301] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2043'. [ 221.970937][ T56] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 221.973916][ T56] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.978662][ T5333] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 221.981395][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.984839][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.987828][T14315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.988320][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.991986][T14315] batadv_slave_0: entered allmulticast mode [ 221.996888][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.996905][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.998917][ T56] usb 6-1: config 0 descriptor?? [ 222.005673][T14258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.063158][T14338] : entered promiscuous mode [ 222.126682][T14346] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2048'. [ 222.157760][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2049'. [ 222.195791][T14397] overlayfs: empty lowerdir [ 222.205507][T14353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14353 comm=syz.5.2049 [ 222.325569][T14424] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2052'. [ 222.396629][T14426] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2050'. [ 222.442930][ T56] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 222.456060][ T56] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 222.485166][T14424] netlink: zone id is out of range [ 222.486840][T14424] netlink: zone id is out of range [ 222.488101][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2053'. [ 222.488640][T14424] netlink: zone id is out of range [ 222.495638][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2053'. [ 222.507335][T14424] netlink: set zone limit has 4 unknown bytes [ 222.559361][T14500] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 222.564286][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2055'. [ 222.662924][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.667495][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.741515][ T56] usb 6-1: USB disconnect, device number 20 [ 222.763882][T14517] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2059'. [ 222.791944][T14533] @: renamed from vlan0 (while UP) [ 222.820182][ T40] audit: type=1400 audit(1756139838.377:25255): avc: denied { nlmsg_write } for pid=14534 comm="syz.5.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 222.827394][ T40] audit: type=1107 audit(1756139838.377:25256): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.982722][ C3] ------------[ cut here ]------------ [ 223.014522][ C3] ODEBUG: activate active (active state 1) object: ffff888035a97198 object type: rcu_head hint: 0x0 [ 223.018160][ C3] WARNING: CPU: 3 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 223.021611][ C3] Modules linked in: [ 223.023172][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 223.027597][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.031500][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 223.033350][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 39 16 8c 4c 89 e6 48 c7 c7 60 2e 16 8c e8 4f 6a 8f fc 90 <0f> 0b 90 90 58 83 05 e6 b5 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 223.038292][T14551] input: syz1 as /devices/virtual/input/input17 [ 223.039680][ C3] RSP: 0018:ffffc900006f8ad8 EFLAGS: 00010286 [ 223.043716][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 223.046426][ C3] RDX: ffff88801e2a8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 223.048988][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 223.052080][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163480 [ 223.054643][ C3] R13: ffffffff8baeb620 R14: 0000000000000000 R15: ffffc900006f8b98 [ 223.057247][ C3] FS: 0000000000000000(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 223.060314][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.062549][ C3] CR2: 0000001b33d63fff CR3: 000000005645f000 CR4: 0000000000352ef0 [ 223.065057][ C3] Call Trace: [ 223.066147][ C3] [ 223.067094][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.068995][ C3] debug_object_activate+0x2bc/0x4c0 [ 223.071322][ C3] ? afs_cell_destroy+0x14c/0x310 [ 223.072921][ C3] ? __pfx_debug_object_activate+0x10/0x10 [ 223.074817][ C3] ? pv_native_safe_halt+0xf/0x20 [ 223.076444][ C3] ? default_idle+0x13/0x20 [ 223.077911][ C3] ? default_idle_call+0x6d/0xb0 [ 223.079738][ C3] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 223.081669][ C3] __call_rcu_common.constprop.0+0x35/0xa10 [ 223.083533][ C3] delete_node+0x1fc/0x8d0 [ 223.084915][ C3] __radix_tree_delete+0x193/0x3d0 [ 223.086549][ C3] radix_tree_delete_item+0xea/0x230 [ 223.088222][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 223.090332][ C3] ? queue_work_on+0x12a/0x1f0 [ 223.091856][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.093531][ C3] ? queue_work_on+0x8b/0x1f0 [ 223.095049][ C3] ? rcu_core+0x797/0x1530 [ 223.096482][ C3] ? rcu_core+0x797/0x1530 [ 223.097916][ C3] afs_cell_destroy+0x1db/0x310 [ 223.099470][ C3] rcu_core+0x79c/0x1530 [ 223.101023][ C3] ? __pfx_rcu_core+0x10/0x10 [ 223.102524][ C3] handle_softirqs+0x216/0x8e0 [ 223.104055][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 223.105728][ C3] __irq_exit_rcu+0x109/0x170 [ 223.107229][ C3] irq_exit_rcu+0x9/0x30 [ 223.108582][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.110400][ C3] [ 223.111393][ C3] [ 223.112352][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.114398][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 223.116184][ C3] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 223.122640][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 223.125309][ C3] RAX: 00000000001a7889 RBX: 0000000000000003 RCX: ffffffff8b93bc29 [ 223.128837][ C3] RDX: 0000000000000000 RSI: ffffffff8de50208 RDI: ffffffff8c162900 [ 223.132441][ C3] RBP: ffffed1003c55000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 223.135869][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 223.139257][ C3] R13: ffff88801e2a8000 R14: ffffffff90ab4b90 R15: 0000000000000000 [ 223.142853][ C3] ? ct_kernel_exit+0x139/0x190 [ 223.144631][ C3] default_idle+0x13/0x20 [ 223.146026][ C3] default_idle_call+0x6d/0xb0 [ 223.147551][ C3] do_idle+0x391/0x510 [ 223.148864][ C3] ? __pfx_do_idle+0x10/0x10 [ 223.150379][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 223.152026][ C3] cpu_startup_entry+0x4f/0x60 [ 223.153584][ C3] start_secondary+0x21d/0x2b0 [ 223.155306][ C3] ? __pfx_start_secondary+0x10/0x10 [ 223.156987][ C3] common_startup_64+0x13e/0x148 [ 223.158571][ C3] [ 223.159575][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.161888][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 223.164656][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.168118][ C3] Call Trace: [ 223.169205][ C3] [ 223.170164][ C3] dump_stack_lvl+0x3d/0x1f0 [ 223.171772][ C3] vpanic+0x6e8/0x7a0 [ 223.173046][ C3] ? __pfx_vpanic+0x10/0x10 [ 223.174519][ C3] ? debug_print_object+0x1a2/0x2b0 [ 223.176164][ C3] panic+0xca/0xd0 [ 223.177369][ C3] ? __pfx_panic+0x10/0x10 [ 223.178806][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 223.180443][ C3] check_panic_on_warn+0xab/0xb0 [ 223.182030][ C3] __warn+0xf6/0x3c0 [ 223.183274][ C3] ? debug_print_object+0x1a2/0x2b0 [ 223.184929][ C3] report_bug+0x3c3/0x580 [ 223.186390][ C3] ? debug_print_object+0x1a2/0x2b0 [ 223.188200][ C3] handle_bug+0x184/0x210 [ 223.189592][ C3] exc_invalid_op+0x17/0x50 [ 223.191073][ C3] asm_exc_invalid_op+0x1a/0x20 [ 223.192628][ C3] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 223.194507][ C3] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 39 16 8c 4c 89 e6 48 c7 c7 60 2e 16 8c e8 4f 6a 8f fc 90 <0f> 0b 90 90 58 83 05 e6 b5 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 223.200520][ C3] RSP: 0018:ffffc900006f8ad8 EFLAGS: 00010286 [ 223.202446][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 223.204934][ C3] RDX: ffff88801e2a8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 223.207628][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 223.210122][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163480 [ 223.212586][ C3] R13: ffffffff8baeb620 R14: 0000000000000000 R15: ffffc900006f8b98 [ 223.215084][ C3] ? __warn_printk+0x198/0x350 [ 223.216607][ C3] ? __warn_printk+0x1a5/0x350 [ 223.218139][ C3] ? debug_print_object+0x1a1/0x2b0 [ 223.219817][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.221675][ C3] debug_object_activate+0x2bc/0x4c0 [ 223.223376][ C3] ? afs_cell_destroy+0x14c/0x310 [ 223.224979][ C3] ? __pfx_debug_object_activate+0x10/0x10 [ 223.226993][ C3] ? pv_native_safe_halt+0xf/0x20 [ 223.228592][ C3] ? default_idle+0x13/0x20 [ 223.230193][ C3] ? default_idle_call+0x6d/0xb0 [ 223.231960][ C3] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 223.234022][ C3] __call_rcu_common.constprop.0+0x35/0xa10 [ 223.235933][ C3] delete_node+0x1fc/0x8d0 [ 223.237390][ C3] __radix_tree_delete+0x193/0x3d0 [ 223.239076][ C3] radix_tree_delete_item+0xea/0x230 [ 223.241000][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 223.243010][ C3] ? queue_work_on+0x12a/0x1f0 [ 223.244648][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.246670][ C3] ? queue_work_on+0x8b/0x1f0 [ 223.248168][ C3] ? rcu_core+0x797/0x1530 [ 223.249605][ C3] ? rcu_core+0x797/0x1530 [ 223.251031][ C3] afs_cell_destroy+0x1db/0x310 [ 223.252849][ C3] rcu_core+0x79c/0x1530 [ 223.254495][ C3] ? __pfx_rcu_core+0x10/0x10 [ 223.256083][ C3] handle_softirqs+0x216/0x8e0 [ 223.257768][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 223.259580][ C3] __irq_exit_rcu+0x109/0x170 [ 223.261213][ C3] irq_exit_rcu+0x9/0x30 [ 223.262645][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.264783][ C3] [ 223.266076][ C3] [ 223.267553][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.270114][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 223.272500][ C3] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 223.280213][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 223.282794][ C3] RAX: 00000000001a7889 RBX: 0000000000000003 RCX: ffffffff8b93bc29 [ 223.285806][ C3] RDX: 0000000000000000 RSI: ffffffff8de50208 RDI: ffffffff8c162900 [ 223.289344][ C3] RBP: ffffed1003c55000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 223.292256][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 223.294852][ C3] R13: ffff88801e2a8000 R14: ffffffff90ab4b90 R15: 0000000000000000 [ 223.297563][ C3] ? ct_kernel_exit+0x139/0x190 [ 223.299213][ C3] default_idle+0x13/0x20 [ 223.300732][ C3] default_idle_call+0x6d/0xb0 [ 223.302350][ C3] do_idle+0x391/0x510 [ 223.303702][ C3] ? __pfx_do_idle+0x10/0x10 [ 223.305288][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 223.307005][ C3] cpu_startup_entry+0x4f/0x60 [ 223.308761][ C3] start_secondary+0x21d/0x2b0 [ 223.310380][ C3] ? __pfx_start_secondary+0x10/0x10 [ 223.312366][ C3] common_startup_64+0x13e/0x148 [ 223.314038][ C3] [ 223.315855][ C3] Kernel Offset: disabled [ 223.317341][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:28:54 Registers: info registers vcpu 0 CPU#0 RAX=00000000001e2933 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004f4d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34b95080 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34b95206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34b95206 00007fff34b9520c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c48612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc900030b7638 RCX=ffffc900030b74cc RDX=1ffff92000616edc RSI=ffffffff817a0aec RDI=ffffc900030b7644 RBP=ffffc900030b76e0 RSP=ffffc900030b7558 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=00000000000079d2 R12=ffffffff81a6db90 R13=ffffc900030b7638 R14=0000000000000000 R15=ffff888057c0a440 RIP=ffffffff81a6dc67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556cd0e500 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd6f4e56c0 CR3=000000003c9ca000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000004 DR2=0000000000000000 DR3=ffffffffffffff80 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefcf8 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda62d3a90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda62d3c16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda62d3c16 00007ffda62d3c1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd6e812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000204dc9 RBX=0000000000000002 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=ffffed1003bd2910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de94880 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd6c913f98 CR3=000000002de99000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557aa9ba40 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557aa9a742 000055557aa9a360 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557aac6c63 000055557aac64a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07006563696d2f74 75706e692f766564 2f01ffffffffffff ffffdf0801800310 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000702100008 80a2d5c808000100 0000080606012982 0002000704100008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaa01ffffffff fffffffff5080980 0302d48208000100 00000806040128f2 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00099603aaaaaaaa aa01ffffffffffff fffff508098c0302 f60200098a03aaaa ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 099c030010988084 00099c0306308080 8400099c03048480 0484000998033c02 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0409800424100006 0172dc028c8a0484 0009a0030401c0a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 808400099c030010 98808400099c0306 3080808400099c03 0484800484000998 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 033c0200099603aa aaaaaaaa01ffffff fffffffffff50809 8c0302f60200098a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03aaaaaaaaaa01ff fffffffffffffff5 0809800302d48208 0001000000080604 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc900006f8440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006c R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33d63fff CR3=000000005645f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023766564646968 2f6273752f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff27d87f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff27d87f6 00007ffff27d87fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e75c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24ad4ced238e6a29 9a42bc7e25e2393f d69aeda8c9353149 94b42e58b9987667 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800125072b5eb750 940c97d106babb06 e7c1f5a85a050004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0178165020117fd5 950010080b050936 32422f05700f9303 ff10080509000103 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb004d6ffcbc6017 c322200cc974c97d 2783fa4db3112785 24b998a10c245b00 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a75e8f92325887 8b4732aede6712b8 829e5562990c62d2 a4de03fe150f0b82 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45fc428e96985dba 6c362b5d9695ab21 7a5747b59e1c4ec5 7fa05487fb004d6f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcbc6017c322200c c974c97d2783fa4d b311278524b998a1 0c245b0001781650 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20117fd595001008 0b05093632422f05 700f9303ff100805 0900010380012507 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000